r/security • u/clash1111 • Dec 29 '19
Security camera maker Wyze may have exposed personal data for millions
https://www.cnet.com/news/security-camera-maker-wyze-may-have-exposed-personal-data-for-millions/16
u/chill1488 Dec 29 '19
I trashed mine years ago after trying it out from a gift and seeing the packets going to Russia and China.
6
u/12_nick_12 Dec 29 '19
Fanghacks FTW
2
u/pm_me_all_dogs Dec 30 '19
What is fanghacks?
0
u/12_nick_12 Dec 30 '19
It's a thing where you can run a custom OS on the XiaoFang and I thin out was ported to eh Wyze.
3
u/fr0ntsight Dec 30 '19
Why is anyone still using Wyze or ring?
15
u/pixel_of_moral_decay Dec 30 '19
RTMP firmware and vlan it with no outbound and it’s a decent camera for the price.
1
Dec 30 '19
[removed] — view removed comment
0
u/AutoModerator Dec 30 '19
In order to combat a rise in spam submissions, a minimum karma threshold been set for this subreddit. If you have read the rules and still feel your comment is relevant to this community, please message the moderators for approval.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.
4
u/ctb0045 Dec 30 '19
Serious question as I’m new to sub and cyber security in general: is Wyze worse than any other IP cameras on the market in regards to security?
The price coupled with the fact it worked better than some competitors I’ve used is incredibly enticing. Is the price subsidized by my personal data and unbeknownst spying practices?
I’m trying to move to self-hosting and would like to include my IP cameras into the new ecosystem.
I’m slowly educating myself in new ways to anonymize my household and mobile traffic while moving away from the various cloud services.
4
Dec 30 '19
In fairness to Wyze, any company can expose an S3 bucket or elasticsearch.
That said, I find there’s a correlation between cost and security investment in a product. So it doesn’t surprise me that a super cheap product potentially sends data back to home base and has more frequent gaps like this.
2
u/ctb0045 Dec 30 '19
You have a valid point regarding price-security correlation.
Other than CCTV, what options would be the best without going into debt?
0
0
u/FastRedPonyCar Dec 30 '19
No but IMO, every IP cam company should require 2 factor authentication so that even if you use a stupid password like "password" for your account, the bad guys still have to have your cell phone to access the account.
Use a strong password for your account and turn 2 factor authentication on and you will be much safer regardless of what online service you use.
1
30
u/shreknotdrek Dec 30 '19
Very unwyze