08 December 2020

Cheap Security Is No Security At All

Something for (next to) nothing, is never a good deal. Why don't people know that by now? From Threatpost we have the following: Smart Doorbells on Amazon, eBay, Harbor Serious Security Issues.

The list is long, but consider the following...

The Victure Smart Video Doorbell also was found to send customers’ home WiFi name and password unencrypted to servers in China.

“If stolen, this data could allow a hacker to access people’s home WiFi – enabling them to target their private data, and any other smart devices they own,” said Lewis.

This is another one of the Chinese SW design issues that is not a mistake. You have to design this into the software to begin with. This is not an artifact of testing, it is a deliberate attack on the eventual customers of the camera in question.

The new version of the Ring video doorbell sells for $139 on the Ring site. The 2020 version goes for $99. There are doorbells selling on various websites for less than half that. Do you really think you are getting security for your home for 40 bucks? You probably are not.

And no I have not gone in for the whole IoT insanity. I have 2 Chromecasts on a segregated network. I had an old Roku, but it has been disconnected for sometime. Click on the image above for my feeling on the whole thing.

No comments:

Post a Comment

Comment Moderation is in place. Your comment will be visible as soon as I can get to it. Unless it is SPAM, and then it will never see the light of day.

Be Nice. Personal Attacks WILL be deleted. And I reserve the right to delete stuff that annoys me.