wiki

500 million Alexa-enabled devices were sold, hopefully some can be repurposed and kept out of landfills. Updating Echo Dot V1 to newer kernel: https://andrerh.gitlab.io/echoroot/ Echo Dot V2 Android tinkering, https://github.com/echohacking/wiki/wiki/Echo-Dot-v2 & https://andygoetz.org/tags/dot/ & https://www.youtube.com/watch?v=H0IEMVDebzE

How to implement this yourself: https://github.com/echohacking/wiki/wiki

I'd recommend taking a look at the ifixit teardown here: https://www.ifixit.com/Teardown/Amazon+Echo+Dot+Teardown/613... They document which chips are inside. This is first gen, but they don't have a second-gen with the same chip description. You probably have second (which is for the better, as it's a mediatek running android and much more usable). Other things you may find interesting: * This guy went over intercepting and tinkering with firmware updates. They were HTTP when he did it; that may have changed. If not, they may still be vulnerable to SSL stripping. https://medium.com/@micaksica/exploring-the-amazon-echo-dot-... * Part 2. Here it is found that it can boot fastboot and be hacked : https://medium.com/@micaksica/exploring-the-amazon-echo-dot-... * People here rooted an echo; this may or may not work on a dot: https://git

https://github.com/echohacking/wiki/wiki/Echo-Dot-v2 has some links to resources regarding custom firmware and some great write-ups explaining the OTA updates.

People have discovered how to at least gain access locally. https://github.com/echohacking/wiki/wiki https://www.reddit.com/r/netsec/comments/4inesj/rooting_the_... Am I saying people shouldn't be skeptical? No. But I'm saying people are focusing on a subset of devices when they've had cordless phones, cell phones, and PCs in their homes for decades. I just get tired of the constant fear-mongering, if we have evidence of a problem, call out Amazon and have them fix it. The cops in this story are banking mostly on the fact that it was accidentally triggered and they have some kind of audio, that's legit. Yet this article was written as if Amazon might magically expose some recording capability.