We have sent emails out to all affected and unaffected Wyze users from the security issue that occurred on 2/16/24. The first email went to all unaffected users. The second email went to users whose event thumbnails were made available to others but not tapped on. The third email went out to user…

Email to all unaffected users: Wyze Friends, On Friday morning, we had a service outage that led to a security incident. Your account and over 99.75% of all Wyze accounts were not affected by the security event, but we wanted to make you aware of the incident and let you know what we are doing to …

Email to users whose event thumbnails were made available to others but not tapped on. Wyze Friends, On Friday morning, we had a service outage that led to a security incident affecting your Wyze account. The outage originated from our partner AWS and took down Wyze devices for several hours earl…

Email to users whose event thumbnails were made available to others and were tapped on Wyze Friends, On Friday morning, we had a service outage that led to a security incident affecting your Wyze account. The outage originated from our partner AWS and took down Wyze devices for several hours earl…

Email to users who had thumbnails made available to them that were not their own, but their thumbnails were not made available to others Wyze Friends, On Friday morning, we had a service outage that led to a security incident affecting your Wyze account. The outage originated from our partner AWS…

I like that this time there was an email sent to everyone identifying all the different conditions/categories of people affected (or not). I see this as a step in the right direction and something that everyone was asking for to be done differently for any future issues, so it is good to see this no…

[image] WyzeJasonJ: mixed up device ID and user ID mapping What is the name of the caching library in question and what kind of bug would lead to a condition where a key would return a different value depending on load? Is this bug publicly documented? Thanks, Jeff

I was wondering that also. I know wyze recently started using Momento for caching of events and stuff: [image] Momento helps Wyze keep smart home devices affordable with object storage... Friends don't let friends overpay for smart home devices—or their cloud bill. …

[image] WyzeJasonJ: created new dashboards I assume this is talking about new dashboards used exclusively by their security team for monitoring things, etc? And not referencing anything for us to use. Though I would LOVE to have a fancy Wyze Dashboard (in the app or the web portal) that I co…

Still not being responsible and blaming the AWS and a third party caching client library is weak. Wyze is responsible for their choice of 3rd party providers, and the implementation to their software / firmware. Each month there has been some form outage/issue lately, get your [mod edit] together …

[image] WyzeJasonJ: The first email went to all unaffected users. Hello Jason … I was hoping to see this email in my inbox, but I did not. Not even on my provider’s email server (i.e. it was not in Spam, etc.) In fact I didn’t receive any of the 5 email permutations you describe. Shouldn’t…

Update on Investigation of 2/16/24 Security Issue

Wyze News

Topic		Replies	Views
Wyze Outage and Investigation of Security Issue Wyze News	158	14679	February 26, 2024
Wyze Web View Service Advisory - 9/8/2023 Wyze News important , service-advisory	37	9436	November 12, 2023
Live, seeing another person’s feed Cameras iphone-ipad , cam-v3 , web-view	14	3616	September 15, 2023
Service Advisory 02/16/2024 Wyze News service-advisory	516	16738	April 29, 2024
What is up with the data breach? Sensors not-platform-specific	125	14385	January 1, 2020

Update on Investigation of 2/16/24 Security Issue

Related topics