Amazon’s new style assistant, Echo Look, could be a privacy nightmare

The Alexa family expanded this week, and not just in number. Unlike its predecessors though, the new Amazon Echo Look doesn’t just listen in for audio commandsit has a camera and can snap photos and video.

Priced at $199.99, the Echo Look is targeted specifically at fashion-focused ladies and gents (but probably mostly ladies). Using just your voice, the product description reads, you can snapfull-length photos and short videos with a hands-free camera. You can then turn those photos into a personal lookbook or get second opinions from a machine learning-based service called Style Check. You can also discover new brands and styles that you might enjoy. It’s kind of like having a robotic personal stylist living in your bedroom.

In addition to the onboard depth-sensing camera, the device hasbuilt-in LED lighting to illuminate your shots. It also uses computer vision-techniques to add some background blur to your pics (the better for hiding the pile of clothes on the floor behind you).

In one respect, the Echo Look is a pretty cool-sounding device. Who wouldn’tat least, occasionallywant an instant, unbiased fashion advice without needing to leave thebedroom? And if Alexa’s going to listen in to your commands and queries, she’s just at home in your bedroom as your living room or kitchen.

However,now, this Echo isn’t just listening toyour every word (an issue that’s led to problems for people named Alexa, as well asviewers watching TV or radio segments about the device). It can also watch what you’re doing, too. And that introducesa whole new set of problems.

As Wired points out, the Echo Look doesn’t come with any guarantees that the device will only stick with its fashion-focused abilities in the future. While Amazon confirmed that the gadget’s machine learning algorithms will be limited to identifying outfitsnot anything else it sees in the shot, such as your face or the rest of your roomit doesn’t have a concrete policy about data collection or user privacy, here.

“Those who choose to use this technology cant and shouldnt expect 100% privacy,” Naked Security’s Bill Brenner kindly reminds usin ablog post about Amazon Alexa securityback in January.

And while the photos you snap with the device may be innocuous, that doesn’t mean they couldn’t be used to more malicious ends in the wrong hands.

“Many people aren’t aware of the metadata associated with every photo taken,” saysZouhair Belkoura, co-founder and CEOof Keepsafe, an app for private photo storage. Photos taken with your phone (or, potentially, by a connected device such as an Amazon Echo) typically containa geo-tag that captures the location as well as the time and date a picture was taken. “It’s not complicated for a hacker or even a company to piece together your identity and personal history from a single photo, much less a series of them.” (Particularly, when AI and image search technology enter the picture.)

The Internet of Things has a serious and well-documented security issue,particularly when it comes to camera tech. Since the webcam era, people have taken control of cameras to spy on or spook their unsuspecting victims.And now that cameras are in, well, just about everything, that vulnerability just keeps growing. Just this month, researcher discovered that a connected, camera-wielding vibrator could be hacked. This would givethe hacker a look into its NSFW video stream, as well as control of the device itself.

The good news is that Amazon does have a few safeguards in place. If the device is functioning properly, you’ll get an audio countdown and visual cues before itsnaps a photo, according to Amazon’s FAQ on the Echo Look. You can also press a button on the side of the device to ensure both the mic and camera are switched off. And through the Look’s partner app, you alsohave the ability to delete photos at any time.

An Amazon representative also told the Daily Dot about other measures the company has taken as well. This includesdisallowing third-party application installation on the device, rigorous security reviews, and encryptingimages and communication between Echo Look, the Echo Look app, and Amazon’s servers.

On top of that,Gary Davis, McAfee’schief consumer security evangelist, recommends connected home device owners do two things to protect their connected gadgetry: change the default password when youinstall the device (which will make it “extremely difficult to target that device,” he says, as long asyouuse a difficult-to-crack password) and apply any patches to the device that the manufacturer publishes ASAP.

The Amazon Echo Look is available by invitation-only right now. If you want to give it a go, you can request yours here.

Read more: