{"id":25040,"date":"2022-12-21T15:08:41","date_gmt":"2022-12-21T15:08:41","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/21\/anker-highlights-what-not-to-do-when-your-crappy-security-standards-are-exposed\/"},"modified":"2022-12-21T15:08:41","modified_gmt":"2022-12-21T15:08:41","slug":"anker-highlights-what-not-to-do-when-your-crappy-security-standards-are-exposed","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/21\/anker-highlights-what-not-to-do-when-your-crappy-security-standards-are-exposed\/","title":{"rendered":"Anker Highlights What Not To Do When Your Crappy Security Standards Are Exposed"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

from the bang-up-job,-everybody<\/i> dept<\/h3>\n

A few weeks ago, The Verge discovered that Anker, the maker of popular USB chargers and the Eufy line of \u201csmart\u201d cameras, had a bit of a security issue<\/a>. Despite the fact the company advertised its Eufy cameras as having \u201cend-to-end\u201d military-grade encryption, security researcher Paul Moore and a hacker named Wasabi\u00a0found it was pretty easy to intercept user video streams. <\/p>\n

The researchers found that an attacker simply needed a device serial number to connect to a unique address at Eufy\u2019s cloud servers using the free VLC Media Player. When approached by The Verge, Anker apparently thought the best approach was to simply lie and insist none of this was possible, despite repeated demonstrations that it was very possible:<\/p>\n

\n

When we asked Anker point-blank to confirm or deny that, the company categorically denied it. \u201cI can confirm that it is not possible to start a stream and watch live footage using a third-party player such as VLC,\u201d Brett White, a senior PR manager at Anker, told me via email.<\/em><\/p>\n<\/blockquote>\n

Two weeks later, The Verge circled back around<\/a> to see if Anker had meaningfully addressed the flaw or answered the news outlet\u2019s questions about how the flaw was possible. <\/p>\n

It hadn\u2019t. Instead, the company decided to purge its website of nearly all previous promises related to privacy<\/a>, such as phrases like \u201cwe\u2019re taking every step imaginable to ensure your data\u00a0remains private, with you,\u201d and \u201cyour recorded footage will be kept private. Stored\u00a0locally. With military-grade encryption. And transmitted to you,\u00a0and only you.\u201d<\/p>\n

So basically Anker\u2019s response to proven allegations of flimsy security was to lie and insist the flaw didn\u2019t exist, then delete any references to its past promises on privacy, now proven false. Just some really inspiring work all around, and fairly representative of the \u201csmart\u201d device space in general. <\/p>\n

\nFiled Under: cameras<\/a>, consumers<\/a>, encryption<\/a>, privacy<\/a>, security<\/a>
\n
Companies: anker<\/a>\n<\/p>\n<\/div>\n