Well, I agree, but maybe for different reasons. If his outlandish claims are true, he should have given it to the CIA, not the general public. Frankly, if he has any actual evidence of this, he’s probably running afoul of some international espionage laws himself.
I’m a hypocrite because I use google homes all over.
Yup!
And if you’re worried about hacks and leaks and your information getting away from you and getting into the hands of people that will use it for their own purposes then cut up all of your credit cards and use cash only. Because every credit card company has had a breach of information to one extent or another every single one of them!
+1
I agree 100%
I hear you - it’s a difficult choice to make.
Possible, sure. But so far, he hasn’t disclosed information that - it appears - was not openly available to him. Remember, this began with unprotected databases.
EDIT: Disregard; I shall defer to @darrylb whom I believe to have more experience in this realm than myself.
The problem with the level of detail that 12Security is getting into (regardless of motive) goes beyond a “discovery” and disclosure" and goes into full download and analysis (which crosses the grey line and goes into unauthorized access to data etc).
All other tech companies aside, it does not change the situation that Wyze had apparently lax security which resulted in a massive leak. And in my opinion have not handled it well as far as their users are concerned.
No critical data was released though.
Each release displaces the unsettled claims of the previous release. And in an odd way “validates” them: you move your focus to the most recent claims.
I’m speaking of his latest claims. If his latest claims were true, I still think he’d probably be running afoul of US law by releasing sensitive information – that he believes is connected to international espionage – to the general public instead of the US government.
Anyway, this seems kinda pointless to even discuss. We’re definitely getting into full-blown conspiracy theory mode at this point.
The one thing you are not allowed to do is pause. We are hoist by our own petard (of momentum.)
Nobody said WiFi passwords were exposed. Where did you see that? Your WiFi SSID was potentially exposed but not your password. Your SSID (unless you take some specific steps) is publicly exposed as a matter of course.
I don’t know who to believe now…
He confirmed in the last post he didn’t even set up the business as a LLC, which I confirmed by searching business records. I think he is on to me. I better go.
Edit: my post about their business
Just for fun…think if a foreign entity really did plan this in hopes of getting a few .mil or .gov or other “influential” persons to buy a camera and then what…they 24/7 listen in…that’s a bold move cotton…let’s see if it pays off…would make a pretty good movie though…I asked my camera to let me know if somebody breaks in at night…fingers crossed for free monitoring!
Oh, I’m sure he’s tracking the thread. Yeah, I noticed several things that seemed to be in response to this thread.
Do you want to sell them?
a great post, I can’t type that fast on my Android
Ummm here is the guy who made the post.
Dan Ehrlich:
https://twitter.com/danehrlich11
I know this because same name, location, and the @twelvesecurity has liked a bunch of his posts, so, it only makes sense.
His claims are very scary if true. I hope we geta response from Wyze about this.