https://www.youtube.com/watch?v=z...HM&
31:47 Recapping the controversy, LTT is done with Anker
Pretty much trying to stop company (Anker) doing this kind of bad behavior.
================
https://www.techdirt.co
Anker Tries To Bullshit The Verge About Security Problems In Its Eufy 'Smart' Camera.
Anker, the popular maker of device chargers and the Eufy smart camera line, proudly proclaims on its website that user data will be stored locally, "never leaves the safety of your home," footage only gets transmitted with "end-to-end" military-grade encryption, and that the company will only send that footage "straight to your phone."
Security researcher Paul Moore and a hacker named Wasabi have discovered that few if any of those claims are true, and that it's possible to stream video from a Eufy camera, from across the country, with no encryption at all simply by connecting to a unique address at Eufy's cloud servers using the free VLC Media Player.
Both clearly demonstrated the problem on Twitter, but, when contacted by The Verge, Anker tried to claim that what the security researchers had clearly, repeatedly demonstrated wasn't possible:
When we asked Anker point-blank to confirm or deny that, the company categorically denied it. "I can confirm that it is not possible to start a stream and watch live footage using a third-party player such as VLC," Brett White, a senior PR manager at Anker, told me via email.
Except it's not only possible, it's been repeatedly proven (though there's no evidence yet of this having been exploited in the wild and it only works on cameras that are in an awakened state). Users really only need a camera's serial number, which they can obtain from the box or sometimes guess. An attacker could also exploit and access cameras he donated to Good Will or other thrift stores.
.....
Moore claims Anker's problems go deeper, claiming that Eufy had violated numerous additional security promises, including uploading camera thumbnail images, including captured users' faces to the cloud without permission and failing to delete stored, private consumer data.
================
This post can be edited by most users to provide up-to-date information about developments of this thread based on user responses, and user findings. Feel free to add, change or remove information shown here as it becomes available. This includes new coupons, rebates, ideas, thread summary, and similar items.
Once a Thread Wiki is added to a thread, "Create Wiki" button will disappear. If you would like to learn more about Thread Wiki feature, click here.
Join The Conversation
Share your experience with the Slickdeals community
Share information with the community. Please follow our Community Guidelines and be kind!
48 Comments
Sign up for a Slickdeals account to remove this ad.
Our community has rated this post as helpful. If you agree, why not thank
https://www.youtube.com/watch?v=z...HM&
31:47 Recapping the controversy, LTT is done with Anker
Pretty much trying to stop company (Anker) doing this kind of bad behavior by hitting their bottom line.
eufy is a separate division than anker's charging products
simply stop buying eufy.
Sign up for a Slickdeals account to remove this ad.
https://a.co/d/g40linM
eufy is a separate division than anker's charging products
simply stop buying eufy.
https://www.youtube.com/watch?v=z...HM&
31:47 Recapping the controversy, LTT is done with Anker
Pretty much trying to stop company (Anker) doing this kind of bad behavior by hitting their bottom line.
Sign up for a Slickdeals account to remove this ad.
Join The Conversation
Share your experience with the Slickdeals community
Share information with the community. Please follow our Community Guidelines and be kind!