OPSEC52 / Week 24 — Smart-home surveillance: the cameras and mics you installed yourself

You hardened the phone and the network, then put an always-on camera at the door and a microphone in every room — and gave the footage to a company that answers subpoenas. The devices arrived labelled “convenience.” They are sensors pointed at your own life.

Threat model: the consumer smart-home data chain — cloud doorbell and security cameras whose footage a vendor can hand to police by subpoena (and, in some partnerships, by request); voice assistants that record and retain snippets tied to your account; smart TVs that fingerprint what you watch; and the durable pattern-of-life they build together, held by third parties outside your control.

The practice

Travel and border OPSEC (Week 20 through Week 23) defend you away from home. The irony is that the richest, most continuous record of your life is the one you built inside your own walls — and pay a subscription to keep.

Three device classes dominate. The doorbell and security camera. Mounted for porch pirates, it records every arrival and departure: your routine, your visitors, the car in the drive, the time you leave for work. On most consumer systems that footage is uploaded to the vendor’s cloud, not kept only on your own storage. That means a company holds it — and a company can be served a subpoena, or, under some police-partnership programs, asked to forward clips. You become a camera on the state’s network without ever consenting to it.

The voice assistant. A smart speaker is a microphone that waits for a wake word, but the “accidental” trigger is routine, and many devices retain the captured audio and its transcript against your account. That archive is both a marketing asset and a discoverable record. The smart TV is the same story told in viewing data: automatic content recognition (ACR) samples the screen and reports what you watch — including from external devices — back to the manufacturer and ad brokers.

The quiet aggregation. Individually each looks harmless. Together they reconstruct presence (when you are home), association (who visits, how often), and habit (sleep, work, what you say and watch). That is the exact dossier a divorce lawyer, a stalker with a court order, a civil litigant, or a state actor would otherwise have to work for — assembled voluntarily and retained by vendors who are easy to serve.

You do not have to rip the smart home out. The goal is to keep the sensors from pointing at you, and to keep the recordings off other people’s clouds.

How to apply it today

• Keep camera footage local. Prefer a camera that records to your own storage (SD card or a local NVR) over one that only works through the vendor cloud. If the footage never leaves your house, there is nothing for a third party to be served.
• Point cameras at property, not people. Aim a doorbell at your own door and threshold, not the sidewalk or a neighbour’s window. Less captured means less to leak, and it keeps you out of the police-partnership footage pool.
• Mute or unplug the always-on mic. Use the hardware mute on smart speakers, or don’t keep one in bedrooms and offices at all. Delete stored voice history and set auto-delete where the vendor allows it.
• Turn off ACR on the TV. In the TV’s privacy settings, disable “viewing information,” “ACR,” or “Samba/Interactivity.” Better: don’t connect the TV to the internet; feed it from a device you control.
• Segment the home network. Put every smart device on a separate VLAN or guest SSID so a compromised camera can’t see your laptop, and so cross-device tracking has less to join. A VPN on the router (Week 17 covers DNS) shields what the devices phone home.
• Choose devices by where the data lives, not by features. “Works offline / local storage / no account required” is the spec that matters.

Common mistakes

• Trusting “end-to-end encrypted” marketing on a cloud camera. If the vendor can share a clip with police, it is not E2EE from you.
• Leaving the default cloud upload on because the free tier is convenient — convenience is the whole business model.
• Forgetting the TV and the car. Both watch and log; the TV reports your viewing, and vehicle telemetry (a future week) reports your movement.
• Aiming the doorbell at the street and enrolling in the vendor’s police-sharing program without realizing footage of passers-by is now requestable.

See also

• Week 14 — Message metadata
• Week 17 — DNS leakage
• Week 23 — Airport OPSEC
• First of the Home & vehicle pillar — upcoming weeks cover smart-doorbell adversaries and vehicle telemetry.

Curated by Cyber Satoshi