You close a laptop when you're not using it. Your phone faces the inside of a pocket, a purse, or lies flat on a table. But the Microsoft Kinect, an always-on camera that will come with every new Xbox One game console, gets a perfect view of your living room. It's always listening for voice commands, even when you turn the Xbox off. It can even read your heartbeat with the right software.
Microsoft says it doesn't plan to abuse that power, and claims it couldn't even if it tried.The company told us that the Kinect's cameras and microphones aren't actually recording or transmitting any audio or video data back to Microsoft's servers without the user's explicit consent, and all ambiently collected data is anonymized.While some voice commands are processed at Microsoft?s servers, they?re converted to text before they ever leave the machine, and biometric data is translated into numerical values that simply indicate, say, where a player?s limbs are during online multiplayer games.
"We aren't using Kinect to snoop on anybody at all," said Microsoft's Phil Harrison.
But would Microsoft be willing to help the government snoop? That's a good question. Last week, a report in The Guardian alleged that Microsoft gave government agencies access to private Skype video and audio calls, perhaps even going so far as to integrate Skype into the NSA's controversial PRISM surveillance system.
Not unlike Kinect, Skype had assured its users that wiretaps were technically impossible. "Because of Skype's peer-to-peer architecture and encryption techniques, Skype would not be able to comply with such a request," the company told CNET in 2008. And four years later, when hackers accused Skype owner Microsoft of changing the service's backend to facilitate government eavesdropping, the company categorically denied the accusations. Now, it seems like the company could have been lying, or at least had quietly changed its mind. Mind you, Microsoft is also denying last Thursday's Guardian report, but the denial is a lot less clear-cut. The company disavows having providing "blanket or direct access" to Skype, but doesn't deny that it provides Skype video or audio to the government upon request.
In fact, Microsoft's statement seems to suggest that it did update Skype to comply with the law. "When we upgrade or update products legal obligations may in some circumstances require that we maintain the ability to provide information in response to a law enforcement or national security request," reads a portion of Microsoft?s response.
So even if we take Microsoft's word that the Kinect doesn't currently upload your private conversations to remote servers, can we trust that Microsoft won't change that in a future software update?
Theoretically, we could trust in the courts. "The Fourth Amendment has been found to be really protective of everything that?s inside a person?s home," said Faiza Patel, co-director of the Liberty and National Security program at the Brennan Center for Justice.
Patel told The Verge that though the government might be able to argue that it can collect telephone call records because they?re simply metadata, or argue that it can collect Skype video chats between people who aren?t citizens of the US, it would be a different story with Kinect. "If you were collecting information through this Xbox device, then clearly it's in the United States at the very least, and then the fact that it?s inside your home also makes it more difficult for them," she said.
Scott Greenwood, a civil rights lawyer, agrees. "It would be a flat violation of what little remains of the Fourth Amendment if the government had the ability to spy on you inside your house via a game system to which it had a backdoor," he told us. "If you're going to be invading someone's personal space, their residential space, you're going to need a warrant unless certain exceptions are met ... and I think having an always-on video camera would never, ever be able to meet the Fourth Amendment standard," he said.
But neither Greenwood nor Patel seemed to think the idea was completely far-fetched. "What we don?t know is whether there are either secret executive orders or regulations that would permit this to happen," said Greenwood, referring to PRISM and other forms of secret data collection greenlit by the FISA court system.
That?s the fear of Christopher Soghoian, a senior policy analyst with the American Civil Liberties Union (ACLU). After tweeting about how untrustworthy Microsoft appears in light of the PRISM allegations, he spoke to us briefly about his concerns.
Soghoian pointed out that there is indeed something of a legal precedent for law enforcement to co-opt consumer technology for surveillance purposes. In 2002, a federal appeals court ruled against the FBI for tapping into a microphone that was part of the emergency call and navigation system (a la OnStar) inside a person?s car. The interesting part is that though two of three judges ruled against the government?s wiretap, their reasoning was simply that it kept emergency calls from functioning properly. You couldn?t dial 911 if the FBI was already on the line, they argued.
"The 9th Circuit reasoning there was delicate ... it's not clear that the Kinect camera serves as critical a function. Conceivably, the NSA could quietly record what's going in your living room without disrupting your ability to play video games," Soghoian told us.
