Alexa had flaw that allows eavesdropping. The flaw comes from an architecture that also Skills to be added. A Skill provides a service (such as weather report). The problem is that some one can write a Skill that does not stop listening. A research firm found the flaw, alerted Amazon who promptly made a fix. Good for them.

It is good and right that Amazon immediate fixed the problem. But this is not good enough. I don’t know if the primary cause of the flaw is incompetency, negligence, apathy, pressure from tight production deadlines, etc. But I believe two problems are (1) the problem is hard and (2) it is a low priority. Consequently, the architecture is not designed with privacy and security first because it is too expensive. We need to change this. Stop buying crappy solutions and vendors will have an incentive to build better ones.