Over the past few months I’ve been waiting for the right time to review some old indoor security cameras. Every time I get ready to write about them, news like the recent Ring ransomware attack and Eufy’s insecure network come up that security put his cam review on the back burner.
why?It’s getting harder and harder to recommend Any Security cameras in knowing if the backend is safe has become something only bug bounty hunters and clairvoyants can safely tell.
I try to be as meticulous as possible when reviewing products. Not because I want to give a bad review, but because it’s my job to walk past idealized press releases and spec sheets and see the cracks beneath the surface.
Positive security camera reviews mean they take internal security at face value, but it’s hard to trust a security company these days.
you can find Several Resolve security camera issues such as video quality or AI detection not passing. But even with the best cameras we’ve tested and liked, there’s always the specter of an unknown breach lurking on the horizon.
That’s not something I (or most tech journalists) are qualified to detect. Smartphones allow you to test most software and security yourself, and give users almost complete control over blocking or enabling tracking by apps. With a security camera, all of that data security is handled remotely. We can only take companies when they say they keep your data safe.
The problem is that we really Can not Trust a security company that provides an honest assessment of cybersecurity.
Regardless of whether they specialize in hardware or software, companies such as LastPass and Eufy hide active breaches for months until they are made public, then soften the circumstances and terminology to downplay the severity. tend to.
Even with the most secure company possible, phishing slips and inadequate protection at third-party affiliates can turn security cameras into gateways that allow someone to access your home feed without your knowledge. will be
An endless series of disturbing incidents
Vise (opens in new tab) reported last week that a third-party vendor associated with Ring was hit with BlackCat ransomware. Ring employees have been told to “don’t talk about this,” and it’s not yet known what user his data will be sent to if Amazon doesn’t pay.
Prior to this latest incident, security researcher Paul Moore discovered that Eufy cameras could send and stream user images and facial recognition data to the cloud without the user’s knowledge or consent. Who‘s private camera feed was sent from a web browser, and Eufy’s AES 128 encryption used a simple key, making it easy to crack.
Eufy has responded by patching some issues and compiling privacy guidelines to ensure that. few At that point, we recommend that you ditch the Eufy camera.
Compared to the epic scale of the Verkada camera breach, which allowed access to 150,000 cameras with a single master password, most of the publicly known flaws in the well-known home security system are relatively minor, and were discovered several years ago. has occurred. But there are still reasons for concern.
In some cases, like Wyze, they hid a critical vulnerability in Wyze Cam v1 for three years before Bitdefender disclosed it. “Even though it’s an outside attacker, [could] Either access the camera feed or run malicious code to further compromise the device,” Wyze claims, claiming the hackers need access to your home’s Wi-Fi, and that the new camera has this problem. has been patched.
Prior to the Ring ransomware incident, a source told The Intercept that Ring contractors could see videos of customers with just their email address, and that Ring executives said encrypting the videos “valued the company.” Ring was embroiled in criticism when he said he felt like he was going down.
Ring eventually caved in and encrypted the camera, but is still frequently criticized for providing Ring’s doorbell footage to police without the user’s consent.
According to Security Magazine, ADT technicians accessed the home feed 9,600 times under the guise of testing a system to spy on female customers without their knowledge. (opens in new tab)Brinks Home accidentally gave a customer access to other users’ names, addresses and phone numbers, but it took months to fix the problem after the customer warned them, he said. Security Sales reports. (opens in new tab).
You can continue, or do a quick Google search for your favorite security company, add “breach” at the end, and browse through some disturbing stories.
embrace the unknown
My overall point is simple.Even popular security companies with seemingly impregnable encryption make decisions that leave personal data and home feeds vulnerable, or hire someone to abuse their power in disturbing ways. Absolutely NO GUARANTEE IF THE COMPANY FINDS you Unless someone whistleblows or a security expert finds a mistake, find it.
In this environment, review indifferently Any I feel irresponsible to evaluate the merits of the company’s security cameras and recommend them to my readers.it’s mine work We’ll write more about Blink Indoor and Blink Mini when it becomes clear how their parent company is handling the Ring ransomware attack.
While we can see the internal benefits of security cams, we can’t see the external factors that could detract from their usefulness.
However, in doing so, we must include the big caveat that we don’t know what Blink’s (or any other company’s) weakest link is. —that could detract from all the usefulness of that device I’m recommending.
In the meantime, here’s a security camera with local storage to keep private footage off your company’s servers (and save you a monthly fee). But that doesn’t always guarantee security. Case in point, we admired her Eufy’s camera as her option for local storage before many of the issues became apparent.
