Hey, folks. We know there’s discussion about the recent BitDefender report and we wanted to make sure that you all have access to our statement regarding the contents of this report. Please follow this link to our statement page on wyze.com : [image] Response to 3/29/22 Security Report A…

From early on, there were questions about Wyze. I understand that they use Alibaba cloud service which would allow the Chinese government to access all recordings. Ignoring that (which is a big concession) this new disaster is incomprehensible. Wyze tiptoes and sneaks around plugging their leaky …

[image] steenthsteenth: From early on, there were questions about Wyze. I understand that they use Alibaba cloud service which would allow the Chinese government to access all recordings. Nope. Just concerns over where the P2P director servers - that carry zero video traffic - were located. …

You don’t need to be at all security savvy to have a router with NAT (all home routers have it) and thus be protected from this exploit. In fact, you’d need to be somewhat security savvy to have a camera that was actually vulnerable to this exploit from the internet, as you would have had to intenti…

[image] speadie: Now, if they are on your LAN, it’s a completely different story, but generally you have to assume that most devices on your LAN have at least a couple vulnerable ports open, with known default passwords or the like. Indeed! While your statements are correct, the vulnerabiliti…

Right, but all of those CVESs require access to port 80 first. Without access to port 80, you cannot connect to the device to execute any of those vulnerabilities. Therefore, any device behind a common router with NAT enabled (as it is by default) is safe from all of those exploits, unless the user …

As that video points out, Bitdefender’s white paper is a how-to manual to hackers and instructs them on how they can take advantage of it. It still remains important that Wyze reach out to their customers with explicit advice regarding this matter.

Advice: keep using your v1s if you want, as long as they are on a secure secondary network. At some point your camera sensors will burn in and you’ll get the purple haze/ splotchy pixels/lines over your images and you should upgrade to something newer. To clarify: I don’t work for wyze, but I do sp…

Excellent! Thanks @Rareapple3 . I’ve only watched the first 3 minutes but at least, unlike The Verge and Gizmodo and the rest, good old Lon seems to know what a router is! Yay for Lon.tv .

I don’t have v1s. Never did. My concern is focused on corporate responsibility and protecting myself going forward. To that end, is the advice in that video good in terms of sequestering the cams to a guest network? I have no and probably will never have cams inside my home, My main concern is pro…

[image] speadie: And, as the cameras are wireless, and do not have ethernet ports, it is impossible to connect any of these cameras directly to a modem, they must be connected to a wireless router, That’s a good wrinkle I hadn’t even considered - I imagined a literal handful of people may hav…

Response to the 3/29/22 Security Report

Wyze News

Rareapple3 April 2, 2022, 5:15pm 64

7 Likes

Productive concern. Informed complaint

Topic		Replies	Views
Wyze in the news today, and it’s not good Watercooler bug	52	3651	February 25, 2023
UPDATE YOUR FIRMWARE - Wyze Cam flaw lets hackers remotely access your saved videos ( * if they can gain access to your local network/WiFi ) Cameras cam-pan-v1 , cam-v1-v2 , cam-v3 , video	149	14935	April 10, 2022
Update Your Wyze Cam v3 Firmware For Latest Security Updates 10/30/23 Wyze News	52	13195	January 31, 2024
READ THIS THREAD! RATE THE THREAT! :military_helmet: Watercooler bug	13	1844	April 3, 2022
This is not secure Cameras	123	45420	May 19, 2020

Response to the 3/29/22 Security Report

Related topics