#31 – What You Need to Know About Access To Your Private Network Cameras


img_4479
…or listen on any of these podcatchers!

itunes google spotify-badge-large-png-1280 player over listen

EFFECTED USERS: Anyone that has a camera on their network, including security cameras, doorbell cameras and baby monitors.

Hair of fire 2 of 5

SUMMARY: We have covered ‘Internet of things’ (IoT) devices from a security perspective many times – essentially suggesting that you take basic security steps like changing the default password, and preventing devices from reaching the internet unfiltered, unprotected, or without your permission.

But, what if you *secure* your IoT device – such as network camera – but it still can be accessed without your permission. Well that is exactly what is happening.

FIX: Not an easy one.  In short – Select any IoT cameras with knowledge of whether or not the MANUFACTURER shares your date with anyone, including the police.  If you don’t know, check the product before you buy it.

Let’s get in to some more details so you can better understand what to do.

Here’s the problem:

Source: EFF

https://www.eff.org/press/releases/eff-amazon-and-shaq-stop-pushing-police-partnerships-doorbell-camera-company

Ring, a subsidiary of Amazon, sells networked cameras—often bundled with doorbells or lighting—that record video when they register movement and then send notifications to users’ cell phones.

Old days: closed circuit = analog streaming.  Default not recorded, but could be.

Today: *Digital* streaming is a ‘recording’ by definition.  Deleting is optional.

While Ring pitches the technology as a way to make your home safer, more than 500 police departments across the country have partnered with Ring to create an omnipresent surveillance system gathering video of people going about their lives.

Here is how EFF sums that up.

“Ring’s law enforcement partnerships are endangering communities, encouraging an atmosphere of mistrust, and facilitating near-constant surveillance by local police. We invite Shaq to talk to our experts instead of attending this ill-advised party.”

SOURCE: That quote is from EFF Digital Strategist Jason Kelley, who is joining me on the show today with the co-author of their recent article on the topic, EFF Political Analyst: Matthew Guariglia.

Welcome guys!

Question for MATTHEW: Why do police partnerships with Ring Doorbell *endanger* communities?

If face recognition a factor with this – yet?  Do police have the ability to run video obtained by Ring through face recognition?

Are there other IoT Camera manufacturers that have police partnerships?

Other IoT Police partnerships in general?

If I asked ring, what would they say is the upside here?

What exactly can a listener do if they have concerns about police

Where can people find out more about your work?

eff.org/ring

#####

THANKS for joining me Jason and Matthew!

Remember everyone, you can find out more by going to DIYCyberGuy.com and searching for #31.

Published by

David W. Schropfer

David W. Schropfer is the CEO of SAFE (Smartphone Authentication For Everyone), a cybersecurity company in New York (www.theSafe.io).  Every day, he and his team of professionals keep the people who use The SAFE Button protected from some of the most common traps, hacks and attacks that target computer systems of all sizes. David is the author of the bestselling cybersecurity book, Digital Habits: 5 Simple Tips to Help Keep You and Your Information Safe Online. His previous books, including The Smartphone Wallet and industry whitepapers, predicted some of the biggest trends in the payments, mobile, and security industries.  Since graduating Boston College, David earned an Executive MBA from the University of Miami.