,
6 tweets,
1 min read
Read on Twitter
1/ Just to be clear, in case you missed it, there is no such thing as an IoT security camera. They are all insecurity cameras. You can probably trust that hackers/spies aren't watching you through your laptop's camera, but you can't apply the same trust to security cameras.
2/ I mention this because at the local Best Buy, about half the shelf space for all IoT devices is dedicated to security cameras of some sort, standalone, multi-camera systems, part of doorbell, part of exterior lighting, etc.
3/ You might conclude from this pervasiveness that the industry is mature, and that while there might be some bad apples, that the industry itself is largely "secure". Otherwise, they couldn't be so popular, right?
4/ Nope, it's a swamp, they are all insecure. I know this from testing many of them. I know this from looking at the rest of them and noticing that none of them advertise security features.
5/ For example, the killer feature is getting video from the camera to your mobile phone. They generally do this by uploading the video to their servers, where they can eavesdrop on it. None advertise end-to-end encryption of the video. None.
6/ Some vendors have better track records than others. For example, Ubiquiti throughout their product lines has always been better than the average on security. They still have issues, and they still don't advertise the security features I'm looking for.
