Tag Archive for: terrible

🚪 These video doorbells have terrible security, consumer experts warn


On a recent Thursday afternoon, a Consumer Reports journalist received an email containing a grainy image of herself waving at a doorbell camera she’d set up at her back door.

If the message came from a complete stranger, it would have been alarming. Instead, it was sent by Steve Blair, a CR privacy and security test engineer who had hacked into the doorbell from 2,923 miles away.

Blair had pulled similar images from connected doorbells at other CR employees’ homes and from a device in our Yonkers, N.Y., testing lab. While we expected him to gain access to these devices, it was still a bit shocking to see photos of the journalist’s deck and backyard. After all, video doorbells are supposed to help you keep an eye on strangers at the door, not let other people watch you.

Blair was able to capture those images because he and fellow test engineer David Della Rocca had found serious security flaws in this doorbell, along with others sold under different brands but apparently made by the same manufacturer. The doorbells also lack a visible ID issued by the Federal Communications Commission (FCC) that’s required by the agency’s regulations, making them illegal to distribute in the U.S.

Thousands of these video doorbells are sold each month on Amazon and other online marketplaces, including Walmart, Sears, and the globally popular marketplaces Shein and Temu. Experts say they’re just a drop in the flood of cheap, insecure electronics from Chinese manufacturers being sold in the U.S.

Previously, regulators have asserted that thousands of unsafe products, including potentially dangerous children’s sleepwear, carbon monoxide detectors and dietary supplements, have been widely available on Amazon.

“Big e-commerce platforms like Amazon need to take more responsibility for the harms generated by the products they sell,” said Justin Brookman, director of technology policy for CR. “There is more they could be doing to vet sellers and respond to complaints. Instead, it seems like they’re coasting on their reputation and saddling unknowing consumers with broken products.”

Consumer Reports warn of security flaws in certain doorbell cameras (Copyright 2024 by WKMG ClickOrlando -…

Source…

Malware Apps On Google Play Added Devices To A Botnet, Proving Google Is Still Terrible At Reviewing Apps – Tech Times


Tech Times

Malware Apps On Google Play Added Devices To A Botnet, Proving Google Is Still Terrible At Reviewing Apps
Tech Times
Security researchers at Symantec recently discovered a total of eight apps from Google's marketplace secretly added devices to a botnet. These apps functioned as fronts for a "new and highly prevalent type of Android malware" named Android.Sockbot.
Google Play Security Reward Program: Bug Bounty Program – Get Rewards through HackerOneHackerOne
Android Developers Blog: Playtime 2017: Find success on Google Play and grow your business with new Play Console …Android Developers Blog
Android malware on Google Play adds devices to botnet | Symantec Connect CommunitySymantec
Symantec –Google Play
all 203 news articles »

android botnet – read more

Inside Yahoo’s Terrible, Horrible, No Good, Very Bad Security Year – PCMag


PCMag

Inside Yahoo's Terrible, Horrible, No Good, Very Bad Security Year
PCMag
Last September, the company announced a state-sponsored data breach that affected more than 500 million accounts, and followed that up a few months later by disclosing a separate hack of more than one billion accounts. To add financial insult to injury

and more »

data breach – Google News

Buying a Blackphone from eBay is a terrible idea – Android Authority (blog)

Buying a Blackphone from eBay is a terrible idea
Android Authority (blog)
An update to Silent OS, the Android-based operating system that powers the device, is disabling core functionality for some users. One customer in Germany, who bought a Blackphone 2 off eBay, was told by Silent Circle that his bricked phone is not genuine.

and more »

android security – read more