{"id":37539,"date":"2023-02-02T23:05:30","date_gmt":"2023-02-02T23:05:30","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2023\/02\/02\/it-took-months-for-anker-to-finally-admit-its-eufy-cameras-werent-really-secure\/"},"modified":"2023-02-02T23:07:07","modified_gmt":"2023-02-02T23:07:07","slug":"it-took-months-for-anker-to-finally-admit-its-eufy-cameras-werent-really-secure","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2023\/02\/02\/it-took-months-for-anker-to-finally-admit-its-eufy-cameras-werent-really-secure\/","title":{"rendered":"It Took Months For Anker To Finally Admit Its Eufy Cameras Weren\u2019t Really Secure"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

from the let’s-just-pretend-this-never-happened<\/i> dept<\/h3>\n

Final November, The Verge found that Anker, the maker of common USB chargers and the Eufy line of \u201cgood\u201d cameras,\u00a0had a bit of a security issue<\/a>. Regardless of the very fact the corporate marketed its Eufy cameras as having \u201cend-to-end\u201d military-grade encryption, safety researcher Paul Moore and a hacker named Wasabi\u00a0discovered it was fairly simple to intercept person video streams.<\/p>\n

The researchers discovered that an attacker merely wanted a tool serial quantity to connect with a singular handle at Eufy\u2019s cloud servers utilizing the free VLC Media Participant, giving them entry to purportedly non-public video feeds. When approached by The Verge, Anker apparently thought the very best method was to easily lie and demand none of this was doable, regardless of repeated demonstrations that it was very doable:<\/p>\n

\n

Once we requested Anker point-blank to substantiate or deny that, the corporate categorically denied it. \u201cI can verify that it isn’t doable to start out a stream and watch dwell footage utilizing a third-party participant akin to VLC,\u201d Brett White, a senior PR supervisor at Anker, advised me by way of electronic mail.<\/em><\/p>\n<\/blockquote>\n

Not solely that, Anker apparently thought it might be a good suggestion to purge its web site of all of its previous guarantees associated to privateness, pondering this could one way or the other trigger people to overlook they\u2019d misled their clients on correct finish to finish encryption. It didn\u2019t.<\/p>\n

It took a number of months, however The Verge stored urgent Anker to return clear, and solely this week did the company finally decide to do so<\/a>:<\/p>\n

\n

In a sequence of emails to The Verge, Anker has lastly admitted its Eufy safety cameras are usually not natively end-to-end encrypted \u2014 they’ll and did produce unencrypted video streams for Eufy\u2019s net portal, like those we accessed from throughout america utilizing an unusual media participant.<\/em><\/p>\n

However Anker says that\u2019s now largely fastened. Each video stream request originating from Eufy\u2019s net portal will now be end-to-end encrypted \u2014 like they’re with Eufy\u2019s app \u2014 and the corporate says it\u2019s updating each single Eufy digital camera to make use of WebRTC, which is encrypted by default. Studying between the strains, although, evidently these cameras might nonetheless produce unencrypted footage upon request.<\/em><\/p>\n<\/blockquote>\n

I don\u2019t know why anyone in tech PR in 2023 would assume the very best response to a privateness scandal is to lie, fake nothing occurred, after which purge your organization\u2019s web site of previous guarantees. Maybe that works in some industries, however if you\u2019re promoting merchandise to techies with very particular safety guarantees hooked up, it\u2019s simply idiotic, and kudos to The Verge for relentlessly calling Anker out for it. <\/p>\n

\nFiled Below: cameras<\/a>, encryption<\/a>, eufy<\/a>, privacy<\/a>, security<\/a>, smart home<\/a>, video<\/a>, video surveillance<\/a>
\n
Firms: anker<\/a>\n<\/p>\n<\/div>\n