Home Artists Posts Import Register

Content

 https://newsroom.fit.edu/2020/05/26/florida-tech-student-researcher-finds-privacy-flaws-in-connected-security-and-doorbell-cameras/ 

Found by Joel! Make sure to update your connected cameras to the newest firmware if they are vulnerable to this issue.

Files

Student Finds Privacy Flaws in Connected Security and Doorbell Cameras - Florida Tech Newsroom

MELBOURNE, FLA. - Ring, Nest, SimpliSafe and eight other manufacturers of internet-connected doorbell and security cameras have been alerted to "systemic design flaws" discovered by Florida Tech computer science student Blake Janes that allows a shared account that appears to have been removed to actually remain in place with continued access to the video feed.

Comments

Gareth Ross

All cameras or certain brands? I'm only with a garden Xiaomi camera here if anyone wants to look at a curtain and my flowers more for them I fried the mic 😂

Anonymous

@gareth The devices where flaws were found are: Blink Camera, Canary Camera, D-Link Camera, Geeni Mini Camera, Doorbell and Pan/Tilt Camera, Merkury Camera, Momentum Axel Camera, Nest Camera Current and Doorbell Current, NightOwl Doorbell, Ring Pro Doorbell Current and Standard Doorbell Current, SimpliSafe Camera and Doorbell, and TP-Link Kasa Camera.

Anonymous

This is an embarrassing flaw. For a 100% cloud managed product, when IAM is changed in the cloud, it sure as hell is expected to be relayed to all the devices and apps that depend on that cloud. I am shocked that all those vendors made the same mistake.