(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
| Amazon Echo Dot 4th Gen (B07FZ8S74R)
|
|
Security Grade
Calculator v
|
Amazon Echo Dot 4th Gen
Release Date: 2020-09-01 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
🔗 Proof
|
Physical mute switch exists, but teardown attacks documented
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
Some CVEs exist for Alexa service
|
| Prior attacks
|
Rare
|
🔗 Proof
|
No large-scale real-world attacks reported
|
| Updatability
|
Very common
|
🔗 Proof
|
Amazon regularly pushes OTA firmware updates
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
Third-party Alexa Skills have weak auth, 70% don't mention privacy
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
TLS/HTTPS for cloud communication
|
| Storage
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Voice recordings encrypted at rest on AWS
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
🔗 Proof
|
Full Amazon account system with account management
|
| Authentication
|
Secure
|
🔗 Proof
|
Supports 2FA via Amazon account
|
| Brute-force protection
|
Exist
|
🔗 Proof
|
Amazon account has rate limiting
|
| Event logging
|
Partial logging
|
🔗 Proof
|
Voice history accessible but limited activity logs
|
| Passwords
|
Require change after setup with complexity requirements
|
🔗 Proof
|
Users set their own Amazon password
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Alexa (Companion App: Amazon Alexa)
|
| Hardware (CPU / GPU)
|
CPU: • GPU:
|
| Memory & Storage
|
Memory: • Storage:
|
| Power, Battery & Charging
|
Battery: • Power: • Charging:
|
| Display & Camera
|
Display: • Camera:
|
| Sound & Connectivity
|
Sound: • Connectivity:
|
| Physical (Dimensions & Mass)
|
Dimensions: • Mass:
|
The Amazon Echo Dot 4th Gen is an always-on smart speaker with far-field microphones.
It requires cloud processing for all Alexa commands (Amazon removed local voice processing in March 2025).
Mozilla's Privacy Not Included project flags Echo devices for voice data collection and human review practices.
Third-party Skills have documented privacy policy violations (arXiv:2204.10920).
However, Amazon provides regular OTA updates, 2FA support, and encryption in transit and at rest.
Overall risk is moderate: constant audio surveillance and cloud dependency are the main concerns.
