Smart devices, shared spaces: the Internet of Things and privacy

Walk into any residence hall, coffee shop, or recreation facility and you’ll encounter a plethora of contraptions: a gaming console or streaming device hooked up to a TV or smart TV, smart glasses worn by someone nearby, a smartwatch charging on a table, a smart speaker on the shelf in the corner, maybe a robot vacuum making its rounds. These devices make up the Internet of Things (IoT). While these devices make our shared spaces more fun and convenient, they also raise privacy questions.

What counts as IoT?

The IoT and internet are not the same thing. The internet is a network of connected devices — like computers, phones, and servers — that enables people to stream movies, email family members, browse websites, etc. The IoT consists of physical, everyday objects that have sensors, software, and internet connectivity built in so they can collect, store, and exchange data. This means that commonly connected devices, such as laptops, are not considered part of the IoT. The distinguishing feature isn’t that the device is connected to the internet; it’s that the device does something else (listening, watching, sensing, tracking) while reporting gathered data back to a company’s servers.

Businesses, organizations, and individuals are increasingly leaning into the IoT, using connected devices to make things more convenient and streamlined. Here are some places to look for IoT devices.

• Common rooms and lounges. Smart speakers, smart TVs, streaming devices, and gaming consoles are placed in these spaces.
• Gyms and rec centers. Connected fitness equipment is becoming more common, and you’ll likely see people wearing (and sometimes charging) smartwatches, smart glasses, and rings at shared machines.
• Study spaces and makerspaces. Sophisticated devices include 3D printers and badge-and-sensor access systems.

Why ‘shared’ makes the privacy problem worse

It all comes down to consent. The smart speaker in your room is a privacy risk you choose to take. The same device in a common area doesn’t have the same buy-in from everyone who encounters it. They may not know that the IoT device can listen to or record them.

Take, for example, always-on mics and cameras, common features for many IoT devices. Smart glasses can covertly stream or record. Smart TVs with a wake word can constantly monitor the room where they’re placed. In a shared space, that means the smart TV will pick up and store conversations without everyone’s consent. Another example is an account that is still logged in to a device in a shared space. Anyone can access that user’s personal data, including payment methods or account credentials. Bluetooth pairing errors are another concern, especially in exercise spaces where headphones and fitness trackers are prolific, and many users set their devices to always be discoverable.

Confusion about who is responsible for IoT devices in shared spaces — be it a customer, manager, or someone from IT — is another common concern. Not having a dedicated person responsible for the IoT device can expose gaps in IT security and privacy and lead to potential compromise.

Privacy tips and tricks

Luckily, there’s no need to swear off IoT devices forever. Practicing a few simple habits in shared spaces can help you protect your personal privacy.

• Log out, every single time. Even if you think you’re the only one who knows about that 3D printer on the fourth floor. You don’t want your data floating around like that.
• Mute the mic. Smart speakers are always listening. If you’re not using them for voice assistance, turn off the mic.
• Keep your wearables close and private. Make sure your fitness tracker is in airplane mode or otherwise undiscoverable via Bluetooth before you put it in your locker (and lock the locker!).
• Ask who’s responsible. If you live or visit somewhere with common areas that are equipped with smart speakers or other IoT devices, ask an employee who manages the device what data it collects and whether (and how) you can ask for it to be removed or muted if you can’t do it yourself.

IoT devices in shared spaces aren’t going away anytime soon. But “shared” shouldn’t mean “no one is responsible.” Increased awareness can go a long way toward keeping the U’s conveniences from becoming liabilities.

 

Node 4 Search