{"id":252257,"date":"2021-05-17T20:20:05","date_gmt":"2021-05-17T17:20:05","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/statement-an-eufy-security-bug-let-strangers-view-and-control-each-others-camera-feeds-review-geek\/"},"modified":"2021-05-17T20:20:05","modified_gmt":"2021-05-17T17:20:05","slug":"statement-an-eufy-security-bug-let-strangers-view-and-control-each-others-camera-feeds-review-geek","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/statement-an-eufy-security-bug-let-strangers-view-and-control-each-others-camera-feeds-review-geek\/","title":{"rendered":"#Statement] An Eufy Security Bug Let Strangers View and Control Each Others\u2019 Camera Feeds \u2013 Review Geek"},"content":{"rendered":"

“#Statement] An Eufy Security Bug Let Strangers View and Control Each Others\u2019 Camera Feeds \u2013 Review Geek”<\/strong><\/p>\n

\n
\"A
Eufy<\/a><\/span><\/figcaption><\/figure>\n

Update:<\/strong> (2PM ET) Added a statement from Eufy. We\u2019re emailing the company now for more info.<\/p><\/blockquote>\n

An Eufy security bug gave users complete access to strangers\u2019 accounts<\/a>, including live video feeds, recordings, camera pan and zoom controls, and private account info. While Eufy claims to have fixed the problem<\/a>, it suggests that all users unplug and reconnect their camera hardware and log out and back into the Eufy Security app<\/a>. That\u2019s a bad sign, folks!<\/p>\n

The bug was reported by several Eufy users on Reddit<\/a>, who found that they were logged into random Eufy Security accounts. According to Eufy, the bug occurred during a server upgrade at 4:50 AM EST, which explains why very few people in the U.S. encountered it. Still, many of the Australians who reported this bug on Reddit<\/a> had access to Eufy Security accounts in the U.S. and other parts of the globe.<\/p>\n

We reached out to Eufy for a statement, which you can read here. We will continue updating this article if the company provides more info:<\/p>\n

Due to a software bug during our latest server upgrade at 4:50 AM EST today, a limited number (0.001%) of our users were able to access video feeds from other users\u2019 cameras. Our engineering team recognized this issue at around 5:30 AM EST, and quickly got it fixed by 6:30AM EST.
\n\u2018The issue affected users at a small rate in the United States, New Zealand, Australia, Cuba, Mexico, Brazil, and Argentina. Users in Europe remain unaffected.<\/p>\n

Our customer service team will continue contacting those who were affected. Eufy Baby Monitors, eufy Smart Locks, eufy Alarm System devices and eufy PetCare products remain unaffected.<\/p>\n

We realize that as a security company we didn\u2019t do good enough. We are sorry we felt short here and are working on new security protocols and measures to make sure that this never happens again.<\/p>\n

For any questions, users can contact our support team at support@eufylife.com.<\/p>\n<\/div>\n

Some users on the r\/EufyCam subreddit report that they heard strange noises from their camera around the time that the bug was first reported, a sign that they were being watch by someone who enabled the camera\u2019s speakerphone functionality. Unsurprisingly, these users say that they don\u2019t want to keep their Eufy cameras anymore.<\/p>\n

Aside from its quick tweet, Eufy hasn\u2019t commented on the bug. We don\u2019t know why users suddenly stumbled into each others\u2019 accounts or why it took Eufy nearly 2 hours to resolve the issue\u2014and we don\u2019t\u00a0really<\/em> know that it\u2019s fixed. The company\u2019s suggestion that users log out and back into their accounts implies that some people may still have access to strangers\u2019 accounts. It\u2019s also unclear whether this problem impacted HomeKit Secure Video<\/a> users, who should be protected from security bugs like this.<\/p>\n

If you own Eufy security cameras, you should log out and back into your account and temporarily unplug your camera hardware for a quick reset. Or, you know, turn off your cameras until Eufy offers some real information on how this security breach occurred. You could also ask to return your cameras and switch to another brand.<\/p>\n

Source: Eufy<\/a>, r\/EufyCam<\/a><\/small> via Engadget<\/a><\/small>\n<\/div>\n