by: Rick Reeves CSS DFE
As reported here at S4S, all devices connected that can connect to the outside world, have some sort of security risk attached to it. This is a deeper look into one of those types of devices.
In the age of smart technology, doorbell cameras have become a popular choice for homeowners looking to enhance their home security. However, a recent investigative report by Consumer Reports (CR) has uncovered alarming findings about inexpensive doorbell cameras that should give every homeowner pause.
According to CR’s investigation, many budget-friendly doorbell cameras suffer from serious security flaws and are essentially all manufactured by the same Chinese company. These devices flood digital marketplaces like Amazon, Walmart, Temu, and others, enticing consumers with their affordability and convenience.
CR’s examination focused on doorbell cameras produced by Eken and Tuck, revealing that they are essentially identical products sold under different brand names. Both cameras, along with at least 10 others, are manufactured by the Shenzhen-based company Eken Group and can be controlled through a common mobile app called Aiwit, also developed by Eken.
The investigation unearthed a slew of security vulnerabilities in these doorbell cameras. Critical flaws include the unencrypted exposure of users’ home IP addresses and Wi-Fi network names over the internet, leaving them vulnerable to exploitation by malicious actors. Additionally, the devices lack proper authentication measures, allowing unauthorized access to private video feeds and still images of users’ homes.
Even more concerning is the absence of a registration code, which FCC regulations mandate for products of this nature. Despite being considered inferior products in the video doorbell market, Eken cameras continue to attract buyers, with CR reporting over 4,200 sales on Amazon alone in January 2024.
Justin Brookman, CR’s director of tech policy, emphasized the shared responsibility of manufacturers and retail platforms in ensuring consumer safety. He called for major ecommerce platforms to improve their vetting processes for sellers and products, stressing the need for new regulations to hold online retailers accountable.
When confronted with CR’s findings, Eken Group remained silent, refusing to address the security concerns raised. CR also reached out to online retailers, prompting varying responses. Temu took swift action by removing all doorbells using the Aiwit platform from its website, while Walmart pledged to follow suit. However, retail giants like Amazon and Sears remained unresponsive, raising questions about their commitment to consumer safety.
In light of CR’s damning report, homeowners must exercise caution when purchasing budget doorbell cameras and demand greater accountability from manufacturers and retailers alike. After all, when it comes to home security, cutting corners could come at a hefty price.
Leave a Reply