Skip to content
Naked Security Naked Security

Mozilla wants to hear your voice – but should you keep quiet?

The organization behind Firefox is crowdsourcing voice samples to help people outside the big companies build software and services. But is having your say a good idea?

Is voice recognition technology really something we want the open-source community to break loose from the big corporations that have developed it and held it tight? Is it technology we want to see used far and wide?

That’s certainly what Mozilla, the organization behind the Firefox browser, wants. It’s building a massive repertory of voice samples, crowdsourcing 10,000 hours of audio so anyone and everyone can use it to train and build voice apps.

The project is called Common Voice. Mozilla says the purpose behind the project is to open up voice recognition technology to those outside large corporations such as Google, Apple and Amazon – a situation that it says is stifling innovation. To make voice recognition available to everyone, it’s asking for people to donate their voice samples, to give developers a rich set of accents and intonations to work from.

You can help by donating your voice or validating others’ voice donations. You can do so on the Common Voice page on your PC or you can download the dedicated iOS app on iTunes. You’ll be asked to read a few sentences aloud, which will be saved into the system.

But should you?

Voice is, after all, a biometric identifier. Yes, it can alter when we have a cold or a sore throat, when we age, or if we undergo gender reassignment. But voice recognition technology has grown sophisticated enough to see through such alterations and still discern identity, with some authentication technologies capable of analyzing more than 100 voiceprint characteristics based on the physical configuration of a speaker’s mouth and throat.

In other words, voice is a more or less unalterable biometric, like our fingerprints or irises.

As such, what happens when and if our voiceprints are compromised? It’s worth considering the ramifications, given that use of voice as a form of secure ID is becoming more widespread. For example, Barclays announced last year that it’s using the technology for telephone banking, and Santander followed suit in February.

But while it’s worth contemplating how our privacy may be affected by sharing our unique voiceprint biometrics with Mozilla’s Common Voice, which will then be made available to developers, it turns out that it’s possible to share voice recordings without giving out other personal information.

According to the Common Voice privacy notice, while sending demographic information such as your accent, age and gender helps researchers improve and create speech-to-text technology and tools, it’s an optional step. So is using an email address to create an account.

That’s a relief. We’ve had plenty of frightfests over voice recognition as it is, thank you very much – the internet-enabled, speech-recognizing, joke-telling, surveillance-ready Hello Barbie springs to mind.

Or Cayla, the doll that used speech recognition and Google translation tools and could be made to say any creepy thing a nearby Bluetooth connection fed to it. Germany’s telecoms watchdog’s take on it: Cayla is an “illegal espionage apparatus”.

Here’s hoping that Mozilla’s project won’t lead to anything as voiceprintishly creepy as that. The lack of requirements to provide personal data associated with the donated voiceprints is a good sign that it won’t.


3 Comments

I am glad you brought this up because I have already done some validation but didn’t donate on the grounds that my bank already uses voice id so it didn’t seem a good idea

Reply

Sometime around 2009 or 2010, Google had a service that offered free long distance calling in the US. You were able to talk for 20 minutes or so before the connection was severed. The catch was that in using this service, you agreed to having your conversations recorded.

If I’m not mistaken, they used this service to fine-tune their voice recognition programs. It was an ingenious idea as a lot of people would use the service and in return, they would get a variety of accents, regionalisms (phrases/words unique to areas), voice tones and pitches.

With the use of voice-recognition as a personal identifier nowadays, I would think twice about using it but at the time, it was convenient. I just made sure not to discuss anything I didn’t want recorded.

Reply

I think if we all step back away from the fear infused ideas of what recorded voice samples might be used for, we would all be able to see that Mozilla is just trying to level the playing field for smaller companies attempting to get into voice-recognition technologies. I honestly can’t think of enough good enough reasons to be worried about someone using my voice sample for the wrong reasons.
At the same time, I do not care for voice-recognition technologies such as Amazon’s echo since it just makes our dependence on big online retailers more ingrained and our laziness to go get something ourselves more approachable.

Reply

Leave a Reply

Your email address will not be published. Required fields are marked *

Subscribe to get the latest updates in your inbox.
Which categories are you interested in?
You’re now subscribed!