Allo
Today Google releases the Allo app — a new messaging app that was expected to provide a few cool features as well as privacy for its users. But the company made some changes, and as a result the new app is really not what we expected.
When Google announced Allo for iOS and Android earlier this year, the app promised a clean interface, cool features including signing up with your phone number, and the built-in Google Assistant. On the one hand, this feature lets you chat with the Google bot and ask it all sorts of questions. On the other hand, it learns how you chat and then offers you quick responses — or as they call them, “smart replies.”
This smart replies feature is controversial: If anyone gains access to your Google account (or your phone with Allo installed), they can use smart replies to imitate your conversation style. In other words, smart replies make stealing your identity much, much easier.
We can also blame smart replies for the lack of privacy in Allo.
Here’s the thing: Google’s team initially stated that all conversations of Allo users would be encrypted so that nobody could read them. Moreover, conversation logs were to be stored on Google’s servers only transiently, and Google promised not to assign identities to the logs.
But the developers changed their minds. Now Allo will store all non-incognito messages until users manually delete them. Messages are encrypted between the device and Google servers, yes. But they are stored, so Google has access to all chats in the app. It uses the chat logs specifically to make smart replies more accurate, relevant, and whatever else the company wants smart replies to be.
https://twitter.com/csoghoian/status/778527380558209024
There is a way to keep your conversation private: Create incognito chats, which are meant to be fully end-to-end encrypted (which means Google can’t read them) — and it seems they work. Of course, in incognito mode you won’t have smart assistant features.
Particularly when it comes to marketing, companies often make unpopular decisions. But this one seems rather unfair to users who were looking forward to Allo’s announced privacy policy and features. We would like to see Google provide an alternative instead of forcing privacy-minded users to start incognito chats every time if they want to keep their data private. For example, Google could let users turn off the Google Assistant and set message storing off.
The new Allo reality is not user-friendly, and in fact, it doesn’t seem like fair play. If you feel as betrayed as I do, there are two things that you can do.
- Use one of these nine messaging apps that value users’ privacy and security.
- Use Allo’s incognito mode.
Quick #poll with the rollout of #GoogleAllo a question for you – Will you use #Allo? #infosec
— Kaspersky (@kaspersky) September 21, 2016
