News for hackers. Stuff that matters.
Re:$7M lost on Amazon inventory, then bankrupt by WhackyIdeas on Saturday December 03, 2022 @07:08AM (#33842859)
Anker might be great in your eyes, but they are deceptive scoundrels in mines. Simply youtube “Eufy leaks”.

But yeah, back to the point… Amazon don’t appear to want to fix this broken system or they’d have done it years ago. It still makes them money.

Re:$7M lost on Amazon inventory, then bankrupt by number6 on Saturday December 03, 2022 @07:56AM (#33843131)
Thanks for the information
Re:$7M lost on Amazon inventory, then bankrupt by SpelingBeeChamp on Saturday December 03, 2022 @09:26AM (#33843697)
Mind explaining the “Eufy leaks” issue?
Re:$7M lost on Amazon inventory, then bankrupt by zamalek on Saturday December 03, 2022 @09:55AM (#33843908)
Linus Tech Tips with his Dunning-Kruger effect once again.

They upload the data required for mobile notifications to a CDN, which any one of us would likely do.

The other half of the controversy is that they upload a facial identifier for the same notification... if you have facial recognition for notifications turned on.

The hook-up has a more informed take on the issue: https://youtu.be/a_rAXF_btvE. I'm not sure if he was previously a software engineer, but he certainly seems to understand the problem Eufy faced like one.

My take-away is that they should have been more transparent about some form of upload being an unavoidable reality for mobile notifications in their marketing material.

Re:$7M lost on Amazon inventory, then bankrupt by tannedNerd on Saturday December 03, 2022 @12:12PM (#33845057)
Ummm I’m pretty sure it’s related to the fact you can access unencrypted video streams from cameras that supposedly only have local recording. Or are you just trying to distract from that?
Re:$7M lost on Amazon inventory, then bankrupt by zamalek on Saturday December 03, 2022 @01:26PM (#33845909)
Do you mean accessing anyone's camera remotely? Or are those recording on the same CDN, with expiring links?
Re:$7M lost on Amazon inventory, then bankrupt by netsharc on Saturday December 03, 2022 @08:28PM (#33849560)
The excusing of Eufy's behavior is incredible... if you have to push something to the cloud, why not encrypt it instead of promising to encrypt "later". Since the device promises local capabilities it would be easy to setup an encryption key on it/on the phone and transfer it to the device over local wifi...
Re:$7M lost on Amazon inventory, then bankrupt by zamalek on Tuesday December 06, 2022 @07:15PM (#33889001)
With the new information we've been getting it definitely seems as though Eufy is in the wrong, especially given that URLs can be brute-forced.
Re:$7M lost on Amazon inventory, then bankrupt by ceejayoz on Saturday December 03, 2022 @09:42AM (#33843799)
I'll never understand how people go "just YouTube it". Sure, I'll sift through a bunch of search results to find a 54 minute video that makes the point you meant to reference 23 minutes in after four ads.

Just give someone an actual link, to an actual article. Like this: https://www.theverge.com/2022/11/30/23486753/anker-eufy-secu...

> Despite claims of only using local storage with its security cameras, Eufy has been caught uploading identifiable footage to the cloud. And it’s even possible to view the camera streams using VLC.

(Personally, this means I won't buy an Eufy camera, and it doesn't change the fact that Anker's chargers have been far better made and reliable than their competitors in my experience.)

Re:$7M lost on Amazon inventory, then bankrupt by jinto36 on Saturday December 03, 2022 @10:30AM (#33844172)
Re: Anker chargers, a few perform pretty well but many are kind of middling. A friend has been doing a lot of reviews of these on Youtube (https://www.youtube.com/c/AllThingsOnePlace) and we started compiling test data- focusing on power conversion metrics such as efficiency and power factor, summarized into a single "power quality score" on a 0-200 scale- in a database at https://pqs.app.

For example, for the Anker power adapters we've tested: https://pqs.app/devices?categoryId=1&search=anker. We're also trying to turn it into a business.

Re:$7M lost on Amazon inventory, then bankrupt by solardev on Saturday December 03, 2022 @10:52AM (#33844350)
Do you test for protocol negotiation for USB C Power Delivery and proper Lightning or Thunderbolt support? I think for many uses that's more important than small electrical losses
Re:$7M lost on Amazon inventory, then bankrupt by jinto36 on Tuesday December 06, 2022 @10:13PM (#33890230)
We haven't done lightning/thunderbolt, but the Youtube reviews include the different USB-C power modes. We also look at some aspects of safety, such as when overcurrent protection in kicks in relative to the device rating, and if it automatically resets after tripping or requires power cycling.
Re:$7M lost on Amazon inventory, then bankrupt by ceejayoz on Saturday December 03, 2022 @10:54AM (#33844367)
Middling is fine for me if it doesn’t fall apart or burn down my house. Quality encompasses more than just efficiency.
Re:$7M lost on Amazon inventory, then bankrupt by lostmsu on Saturday December 03, 2022 @10:14AM (#33844054)
> And it’s even possible to view the camera streams using VLC.

That sounds like RTSP to me, which makes the rest questionable.

Re:$7M lost on Amazon inventory, then bankrupt by WhackyIdeas on Saturday December 03, 2022 @12:53PM (#33845529)
I hear what you are saying. But, I KNOW that it’s the top result with the search criteria I suggested… there was no need to sift through anything so your comment is generalised at some other experience.

I’ve already spent a huge amount of my time on that story, being in direct talks with the security researcher before the story exploded - I even helped raise a lot of awareness. So excuse me if I wanted to just quickly mention a quick, no need to sift, route to the info.

(If you happen to see a car on the researchers Twitter running over a Eufy system - that was one of the many things I did for awareness lol).

Re:$7M lost on Amazon inventory, then bankrupt by ceejayoz on Saturday December 03, 2022 @03:37PM (#33847060)
> your comment is generalised at some other experience

No, it's aimed specifically at this one.

YouTube's search results vary from person to person. I don't know which video you want me to watch - Paul Moore's five minute one? Den of Tools' eight minute one? Byte of Geek's nine minute one? Something else?

At the very least, since you've got a video in mind, link to it, but text remains a way better medium for this sort of thing.

Re:$7M lost on Amazon inventory, then bankrupt by WhackyIdeas on Saturday December 03, 2022 @04:14PM (#33847427)
First one, Paul Moore.

Don’t get me wrong, I know your youtube probably looks different to mine as we probably have differing interests. But I didn’t know Youtube search results varied from person to person - this is news to me.

Re:$7M lost on Amazon inventory, then bankrupt by than3 on Saturday December 03, 2022 @05:58PM (#33848366)
This has been happening fairly actively since at least 2020, its not just youtube, search results have many of the same issues, and its not a single device, its by person(profile).

They've linked many of your devices together so you will see the same consistent videos/results unless you compare with other people, at places that are not your home location.

Re:$7M lost on Amazon inventory, then bankrupt by astura on Sunday December 04, 2022 @09:50AM (#33854151)
Results vary from person to person and probably depend on locale and language.

Even if they didn't saying "it's the top result for ____" STILL isn't helpful. Loads of people make videos designed to rank high for "in" topics. So if it's the top result today it's probably outranked tomorrow by a larger channel.

Re:$7M lost on Amazon inventory, then bankrupt by propogandist on Saturday December 03, 2022 @12:37PM (#33845299)
Anker’s EUFY product, which markets itself as a home security service not requiring cloud connectivity, uploads facial recognition and other data to their cloud

https://arstechnica.com/gadgets/2022/11/eufys-no-clouds-came...

https://www.macrumors.com/2022/11/29/eufy-camera-cloud-uploa...