{"id":49540,"date":"2022-12-01T22:05:00","date_gmt":"2022-12-01T22:05:00","guid":{"rendered":"http:\/\/a5c093c5-6dc4-494b-b674-61adad91a263"},"modified":"2022-12-01T22:05:00","modified_gmt":"2022-12-01T22:05:00","slug":"eufys-security-cameras-send-data-to-the-cloud-without-consent-and-thats-not-the-worst-part","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/eufys-security-cameras-send-data-to-the-cloud-without-consent-and-thats-not-the-worst-part\/","title":{"rendered":"Eufy’s security cameras send data to the cloud without consent, and that’s not the worst part"},"content":{"rendered":"
\n
\n
\"A<\/picture><\/div>\n<\/p><\/div>\n

\n
\n
\n

Constantly selling the idea of private, secure local storage, Eufy Security has been caught misleading consumers.<\/p>\n<\/div>\n<\/div>\n

Illustration: Maria Diaz | ZDNET – Photo: MaryAnnShmueli via Getty Images<\/span><\/figcaption><\/figure>\n

Eufy’s claims<\/a> to keep “privacy in your own hands” have been rendered null, after a researcher caught the security camera company uploading local-only footage to the cloud without user authorization or knowledge. To top it all off, users have also been made aware that you can watch camera streams using VLC<\/a> without authentication.<\/p>\n

Paul Moore<\/a>, a security researcher, was the first to expose the security flaw in local data being stored in the cloud. He pointed out in the video below that even though Eufy Security claims to take “every step imaginable” to keep its users’ data private and local, it still uploads not only video thumbnails to cloud servers, but also photos of the faces of people detected in the video, and user identifier data. <\/p>\n