Consumers looking to purchase video doorbells this holiday season would do well to stick with reputable and trusted brands.
A recent review of nearly a dozen inexpensive video doorbells sold via online markets such as Amazon and eBay uncovered multiple security vulnerabilities in each device. The most serious among them was the practice by some of the devices to send Wi-Fi names, passwords, location information, photos, video, email, and other data back to the manufacturer for no obvious reason.
Security consultancy the NCC Group, in collaboration with UK consumer organization Which?, selected 11 video doorbells available on popular online markets in the UK. Some looked very similar to each other but were from different manufacturers. Other devices looked like copycats of Amazon Ring. All of the products had prices that were substantially lower than the average retail price for well-known brands, such as Ring and Google's Nest Hello smart doorbell.
Though most of the tested models were from little-known brands, some of them had high user ratings and one of the products even was endorsed with Amazon's Choice logo — meaning the retailer had recommended the product.
The NCC Group and Which? study uncovered security issues related to the hardware, associated applications, and servers that streamed and transferred data from the doorbells.
For example, two video doorbells from Victure and Ctroncs had a security flaw in them that could allow an attacker to steal the network password and use it to hack into the doorbell and the router as well as other devices connected to the network.
Another smart doorbell from Victure, wh ..
Support the originator by clicking the read the rest link below.
