Saturday, January 12, 2019

If You Bought Amazon Ring, You May Have Shared Your Security Stream With Ring Team Or Ukraine Developers.

Ring my Bell

An investigation in to Amazon's Ring Security Video Surveillance cameras by the Intercept’s Sam Biddle reveal that more than you have access to the camera's web interface. The report that was published Thursday alleged that owners of Ring security cameras may have been spied on by employees of the company, an allegation the Amazon owned, Ring denies.

However, citing sources familiar with Ring’s privacy practices, the Intercept reported that employees who were reportedly granted “highly privileged access” were able to gain access to video recordings as well as to Ring cameras in- or outside an individual’s home, depending on where the devices were positioned, using only that person’s email address. Per the Intercept:

Despite its mission to keep people and their property secure, the company’s treatment of customer video feeds has been anything but, people familiar with the company’s practices told The Intercept. Beginning in 2016, according to one source, Ring provided its Ukraine-based research and development team virtually unfettered access to a folder on Amazon’s S3 cloud storage service that contained every video created by every Ring camera around the world. This would amount to an enormous list of highly sensitive files that could be easily browsed and viewed. Downloading and sharing these customer video files would have required little more than a click. The Information, which has aggressively covered Ring’s security lapses, reported on these practices last month.

Also according to the Intercept, the said high-level access to Ukraine was provided in part because of failures in Ring’s object and facial recognition technology and in an attempt to better its product. Having previously reported on such alleged employee access in December, the Information said in its own report that users early on frequently complained of triggered alerts for such innocuous activity as a passing car.
Intercept

No comments: