Eufy Security responds to camera security concerns

Screenshot of Eufy Security app update on iOS App Store

The new update adds the missing disclaimer.

Maria Diaz/ZDNET

Eufy Security has come under public criticism over the past two weeks since customers reported it Many security flaws in its structure. As of Monday, an update has been released to the Ufi Security app to include a statement revealing that thumbnails will be uploaded to the company’s cloud servers.

A bug fix for the app comes after the reports Eufy security cameras The camera sent captured images of the feed and detected faces AWS Cloud ServersEven if the cloud storage option is disabled in the app’s settings.

Further: Ufi’s security cameras send data to the cloud without consent, and that’s not the worst part

The Eufy security app gives users the option to display push notifications only as text or text and a thumbnail of the image captured by the camera. These photos are sent to the cloud only when a customer chooses to display thumbnails of push notifications on their phones.

Front view of wall-mounted EufyCam 3

Maria Diaz/ZDNET

In fact, storing images in the cloud is similar to security cameras sending photo thumbnail push notifications to Android devices and iPhones; The problem here is that Eufy never discloses it to its customers. In fact, it previously emphasized the idea that customers’ data would be kept local and private, appealing to people who prefer local storage for privacy.

Further: We are still failing to learn the most important lesson in cyber security. This needs to change, fast

As evidenced by Eufy’s email as reported by the Information Security Adviser Paul MooreThe company was reportedly aware of the discrepancy and was working on a new fix at the same time. Homepage 3. The company also said it will “encrypt the API between the browser and the server to avoid plain text URL display,” meaning uploaded data will be better hidden.

Personally, I prefer to keep my push notifications without thumbnails to prevent these issues.

Screenshot of the updated Eufy security app

New disclaimer added to Eufy security app.

Maria Diaz/ZDNET

We’ve asked for feedback, but have yet to hear whether the company will resolve the issue of people being able to view camera feeds using VLC player and a URL, without requiring authentication. If the sound of it makes you want to turn off your Eufy cameras and throw them into the abyss, you’re not alone.

Review: Why haven’t I removed my Eufy cameras yet?

However, please note that in order for someone to gain access to your video feed this way, they will need to log into your account using your information and password to obtain a unique URL for the camera feed. They need to accurately guess when the camera is streaming, which can trigger the camera to record when an event occurs or when someone is watching the live feed.

Source link

Denial of responsibility! is an automatic aggregator around the global media. All the content are available free on Internet. We have just arranged it in one platform for educational purpose only. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, all materials to their authors. If you are the owner of the content and do not want us to publish your materials on our website, please contact us by email – The content will be deleted within 24 hours.

Similar Articles

Popular post