Shulou(Shulou.com)11/24 Report--

CTOnews.com Security consultant Paul Moore discovered last November that Anker's Eufy brand security cameras still upload some data even when cloud storage is disabled. In a recent statement to foreign technology media The Verge, Anker acknowledged that Eufy Cameras had not previously provided end-to-end encryption, but has now fixed this problem and promised to continue to improve in the future.

Eufy officials acknowledge that the security cameras do not provide end-to-end encryption locally, but provide unencrypted video streams through the Eufy portal, although officials say they have fixed the problem so far. CTOnews.com with Eufy's related statement:

Users who previously visited eufy.com, logged into our secure Web portal, were able to enter debug mode, locate live streams using DevTool in the Web browser, and play and share videos with others. Others click on the link to play it outside our security system.

However, sharing the link is the user's choice and they need to log in to the eufy portal to get the link.

Based on industry feedback, eufy Security Web Portal has since today prohibited users from entering debug mode and has hardened and obfuscated the code out of caution.

In addition, the content of video streams is encrypted, which means that these video streams can no longer be played on third-party media players such as VLC.

I should point out that only 0.1% of everyday users currently use the secure Web portal feature on eufy.com Most of our users use the eufy Security app to watch live broadcasts. Either way, there were issues with the previous design of our Web portal that have been addressed.

Video streaming requests from Eufy portals will be end-to-end encrypted in the future, just like the Eufy app, which Anker says is the primary way Eufy users access camera streams.

Anker said each Eufy camera will be updated to WebRTC with default encryption and Eufy video streams will no longer be able to be played through third-party apps.

Related Reading:

Disabling cloud storage is also ineffective. Anker's Eufy surveillance camera is pointed to the cloud to send data.

Eufy incident follow-up: no fix for stealing thumbnail images, but users will be clearly informed

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.