5 ms·
If you have the printer on your network, and any Amazon device on your network, the Amazon device could easily query the printer for ink levels. My Home Assista
by orev 3y ago
If you have the printer on your network, and any Amazon device on your network, the Amazon device could easily query the printer for ink levels. My Home Assistant does this and I never connected HA to the printer. It’s just part of the status information the printer seems to make available on the network.
It’s not surprising to me that Amazon would do this using one of their devices, as everyone seems to be grabbing as much data as they can. It’s probably described in the T&Cs somewhere (that they can scan your network and use data from it).
- RIMR 3y agoTime to learn everything they scan for, and set up a honeypot that makes people's Amazon devices fill with dummy devices.
- Ajay-p 3y agoIt’s probably described in the T&Cs somewhere Which.. I never read but I concur with your theory.
- wepple 3y agoWhilst it might be in the T&Cs somewhere, it’s the not-good variety of surprise that a company should really try to avoid. I don’t have Alexa devices on my network, and I’m glad. I do have other vendor smart things, and I’d absolutely expect a notification if they were going to be poking around at my other devices to send information off to a company for their benefit. Poor play, Amazon
- kxrm 3y agoThis is why IoT devices on my network get their own subnet and they are blocked from communicating with anything but what I allow them to communicate with, including the Internet. Also I want to make it clear, it shouldn't have to be this way. Devices should be transparent about how they function, but sadly they are not.
- t0bia_s 3y agoAlso you can use DNS filter like NextDNS.io to block specific domains. How you setup your LAN printer from subnet to get data from your your main subnet?
- miki123211 3y agoIs your printer an IoT device? Is your Echo an IoT device? I'd say yes to both, and so the problem would persist. One way to solve this would be to put every single device on a separate vlan (like some public networks do). Just like NAT, that approach certainly has its advantages for the average user from a security perspective, but forces centralization and usage of third-party servers where it shouldn't be required. Maybe what we need is a "network administration protocol" that would give you pop-ups on your phone when devices tried to discover what's on your network.
- kxrm 3y ago> Is your printer an IoT device? Is your Echo an IoT device? >I'd say yes to both, and so the problem would persist. My IoT LAN is configured to keep each device within the subnet isolated from one another. So while they might share a subnet, they aren't able to snoop on each other. They also do not share the same switch.
- fmajid 3y agoOut of curiosity, how do you achieve that? One VLAN per IoT device?
- T3OU-736 3y agoNot OP. This is done via "L2 Isolation". WiFi access points typically have this setting, as do some wired switches (ex: Cisco's PVLAN)
- Fnoord 3y agoManaged switch with VLAN, WLAN AP with VLAN. My Ubiquiti networking stuff does this but if you want decent priced 10 gbit managed switch you're SOL. You'll end up with China stuff.
- nopurpose 3y agoOld Brocade switches are quite feature rich, but still affordable.
- patrickdavey 3y agoI keep seeing this suggestion (put devices on a subnet, lock them out of everything else)... Do you have a link or guide to help me understand how to set this up. It seems like a great idea!
- netsharc 3y agoThe cheapest way would be to go to your WiFi router and look for "Guest WiFi" settings, hope it's not too cheap that this functionality isn't included, activate said network, and put the devices on the guest WiFi. More complicated settings involve the keyword "VLAN", afaik most home routers don't have this.
- t0bia_s 3y agoHow would you send a data to printer that is in separate subnet?
- kxrm 3y agoUnfortunately I do not have a guide, perhaps this would be a good idea for a blog post? I'll write something up when I have a free weekend. Keep in mind that a lot of this will be heavily dependent on what kind of router and LAN configuration you have.
- sys_64738 3y agoThis is a smart idea now you mention it. Those internet of sh!t devices are back doors onto your network.
- Waterluvian 3y agoThis is a good idea that’s inaccessible to >99% of customers. That’s the part that frustrates me. We save ourselves but these companies just couldn’t care less about our teeny tiny slice of the pie.
- belorn 3y agoI doubt the legality of a T&Cs that demands permission to use and gather information on the local network and any device connected to it. It seems about as legal as T&Cs that demand the users first born child.
- orev 3y agoIt seems like you haven’t been paying attention to what big tech has been doing the past decade. Every piece of available data is considered as a free-for-all to collect and use however they want. Everything on the web is scraped. Every time you move your phone its location is collected. Everything you say in earshot of a smart speaker is recorded. Every time you turn on a light, the bulb phones home. There’s no legal rights or enforcement against any of this.
- teddyh 3y agoYou’re making an is-ought mistake. User belorn only claimed that such collection and recordings would be illegal, not that the law would be enforced.