Amazon is receiving a lot of flak from those within the tech community over its decision to stop encrypting locally stored data on Fire devices in it the latest update to its Fire operating system.
Once users upgrade to Fire OS 5, data stored on their Amazon Fire HD, Amazon Fire TV, Kindle Fire or Fire Phone will no longer be encrypted. This means that the data on Fire devices is less secure than before, leaving them vulnerable to cyber attacks and accessible to thieves if stolen.
The encryption removal was first flagged by Amazon forum members, and was later made public in a tweet from David Scovetta.
While Apple fights the good fight, @Amazon removes encryption as option from FireOS 5 | @csoghoian @normative @eff pic.twitter.com/nggBdtFG7j
— David Scovetta (@davidscovetta) March 3, 2016
For its part, Amazon's argument for removing the encryption is simple - if somewhat disingenuous. "No one used it," or so Amazon claims.
"In the fall when we released Fire OS 5, we removed some enterprise features that we found customers weren't using. All Fire tablets' communication with Amazon's cloud meet our high standards for privacy and security including appropriate use of encryption," the company said in a statement.
This development is troubling for many because it comes as Apple is in the midst of an epic legal battle against the FBI in support of encryption. The agency has demanded that Apple create a backdoor into a locked iPhone 5c, but the tech giant is warning that the request, which it calls unprecedented and unconstitutional, would weaken its software and risks the safety of all iOS users.
Multiple tech companies have come out in support of Apple, with some going as far as to jointly file an amicus brief to the court. They ask that a proper debate be held before Congress on whether security forces have the legal right to request companies bypass their own encryption systems on demand.
Interestingly enough, Amazon is one of the tech companies that signed the amicus brief. So while Amazon's decision to remove its own encryption is irrelevant within the context of the ongoing debate (since it did it on its own volition), it still begs the question on where the company truly stands on protecting its customer's privacy.
So while Amazon's motivations may be no more than an attempt to improve the performance of low-cost, low-power hardware, the move still underlines the reality that strong security doesn't necessarily come on the cheap.
