Insta360: Difference between revisions

Line 117:

*Potentially create "wormable" attacks where one compromised camera could attack others

Despite Insta360's claims in August 2022 that the issue had been addressed, independent testing in September 2022 confirmed the vulnerability remained exploitable on firmware version 1.0.59_build1.<ref>{{Cite web |last=Petkauskas |first=Vilius |date=2022-08-31 |title=Insta360 vulnerability allows unauthorized access to user photos |url=https://cybernews.com/news/insta360-vulnerability-allows-unauthorized-access-to-user-photos/#:~:text=A%20software%20flaw%20discovered%20seven,X2%20device%20in%20January%202022 |url-status=live |archive-url=http://web.archive.org/web/20250923072505/https://cybernews.com/news/insta360-vulnerability-allows-unauthorized-access-to-user-photos/ |archive-date=23 Sep 2025}}</ref><ref>{{Cite web |last=Spadafora |first=Anthony |date=2022-08-31 |title=Own an Insta360 camera? This flaw could let anyone access your photos and videos |url=https://www.tomsguide.com/news/own-an-insta360-camera-this-flaw-could-let-anyone-access-your-photos-and-videos |url-status=live |archive-url=http://web.archive.org/web/20251210214146/https://www.tomsguide.com/news/own-an-insta360-camera-this-flaw-could-let-anyone-access-your-photos-and-videos |archive-date=10 Dec 2025}}</ref><ref>{{Cite web |last=Limer |first=Eric |date=2022-08-29 |title=Vulnerability in Insta360 Cameras Lets Anyone Download Your Photos |url=https://petapixel.com/2022/08/29/vulnerability-in-insta360-cameras-lets-anyone-download-your-photos/ |url-status=live |archive-url=http://web.archive.org/web/20251030035742/https://petapixel.com/2022/08/29/vulnerability-in-insta360-cameras-lets-anyone-download-your-photos/ |archive-date=30 Oct 2025}}</ref><ref>{{Cite web |last=Haile |first=Allen |date=2022-09-06 |title=ScrewX2 and the Insta360 WiFi security hole |url=https://subethasoftware.com/2022/09/06/screwx2-and-the-insta360-wifi-security-hole/ |url-status=live |website=Sub-Etha Software}}</ref>

Despite Insta360's claims in August 2022 that the issue had been addressed, independent testing in September 2022 confirmed the vulnerability remained exploitable on firmware version 1.0.59_build1.<ref>{{Cite web |last=Petkauskas |first=Vilius |date=2022-08-31 |title=Insta360 vulnerability allows unauthorized access to user photos |url=https://cybernews.com/news/insta360-vulnerability-allows-unauthorized-access-to-user-photos/#:~:text=A%20software%20flaw%20discovered%20seven,X2%20device%20in%20January%202022 |url-status=live |archive-url=http://web.archive.org/web/20250923072505/https://cybernews.com/news/insta360-vulnerability-allows-unauthorized-access-to-user-photos/ |archive-date=23 Sep 2025}}</ref><ref>{{Cite web |last=Spadafora |first=Anthony |date=2022-08-31 |title=Own an Insta360 camera? This flaw could let anyone access your photos and videos |url=https://www.tomsguide.com/news/own-an-insta360-camera-this-flaw-could-let-anyone-access-your-photos-and-videos |url-status=live |archive-url=http://web.archive.org/web/20251210214146/https://www.tomsguide.com/news/own-an-insta360-camera-this-flaw-could-let-anyone-access-your-photos-and-videos |archive-date=10 Dec 2025}}</ref><ref>{{Cite web |last=Limer |first=Eric |date=2022-08-29 |title=Vulnerability in Insta360 Cameras Lets Anyone Download Your Photos |url=https://petapixel.com/2022/08/29/vulnerability-in-insta360-cameras-lets-anyone-download-your-photos/ |url-status=live |archive-url=http://web.archive.org/web/20251030035742/https://petapixel.com/2022/08/29/vulnerability-in-insta360-cameras-lets-anyone-download-your-photos/ |archive-date=30 Oct 2025}}</ref><ref>{{Cite web |last=Haile |first=Allen |date=2022-09-06 |title=ScrewX2 and the Insta360 WiFi security hole |url=https://subethasoftware.com/2022/09/06/screwx2-and-the-insta360-wifi-security-hole/ |url-status=live |website=Sub-Etha Software |archive-url=http://web.archive.org/web/20251017164437/https://subethasoftware.com/2022/09/06/screwx2-and-the-insta360-wifi-security-hole/ |archive-date=17 Oct 2025}}</ref>

===Content Creator controversy (''2024'')===

@@ Line 117: / Line 117: @@
 *Potentially create "wormable" attacks where one compromised camera could attack others
-Despite Insta360's claims in August 2022 that the issue had been addressed, independent testing in September 2022 confirmed the vulnerability remained exploitable on firmware version 1.0.59_build1.<ref>{{Cite web |last=Petkauskas |first=Vilius |date=2022-08-31 |title=Insta360 vulnerability allows unauthorized access to user photos |url=https://cybernews.com/news/insta360-vulnerability-allows-unauthorized-access-to-user-photos/#:~:text=A%20software%20flaw%20discovered%20seven,X2%20device%20in%20January%202022 |url-status=live |archive-url=http://web.archive.org/web/20250923072505/https://cybernews.com/news/insta360-vulnerability-allows-unauthorized-access-to-user-photos/ |archive-date=23 Sep 2025}}</ref><ref>{{Cite web |last=Spadafora |first=Anthony |date=2022-08-31 |title=Own an Insta360 camera? This flaw could let anyone access your photos and videos |url=https://www.tomsguide.com/news/own-an-insta360-camera-this-flaw-could-let-anyone-access-your-photos-and-videos |url-status=live |archive-url=http://web.archive.org/web/20251210214146/https://www.tomsguide.com/news/own-an-insta360-camera-this-flaw-could-let-anyone-access-your-photos-and-videos |archive-date=10 Dec 2025}}</ref><ref>{{Cite web |last=Limer |first=Eric |date=2022-08-29 |title=Vulnerability in Insta360 Cameras Lets Anyone Download Your Photos |url=https://petapixel.com/2022/08/29/vulnerability-in-insta360-cameras-lets-anyone-download-your-photos/ |url-status=live |archive-url=http://web.archive.org/web/20251030035742/https://petapixel.com/2022/08/29/vulnerability-in-insta360-cameras-lets-anyone-download-your-photos/ |archive-date=30 Oct 2025}}</ref><ref>{{Cite web |last=Haile |first=Allen |date=2022-09-06 |title=ScrewX2 and the Insta360 WiFi security hole |url=https://subethasoftware.com/2022/09/06/screwx2-and-the-insta360-wifi-security-hole/ |url-status=live |website=Sub-Etha Software}}</ref>
+Despite Insta360's claims in August 2022 that the issue had been addressed, independent testing in September 2022 confirmed the vulnerability remained exploitable on firmware version 1.0.59_build1.<ref>{{Cite web |last=Petkauskas |first=Vilius |date=2022-08-31 |title=Insta360 vulnerability allows unauthorized access to user photos |url=https://cybernews.com/news/insta360-vulnerability-allows-unauthorized-access-to-user-photos/#:~:text=A%20software%20flaw%20discovered%20seven,X2%20device%20in%20January%202022 |url-status=live |archive-url=http://web.archive.org/web/20250923072505/https://cybernews.com/news/insta360-vulnerability-allows-unauthorized-access-to-user-photos/ |archive-date=23 Sep 2025}}</ref><ref>{{Cite web |last=Spadafora |first=Anthony |date=2022-08-31 |title=Own an Insta360 camera? This flaw could let anyone access your photos and videos |url=https://www.tomsguide.com/news/own-an-insta360-camera-this-flaw-could-let-anyone-access-your-photos-and-videos |url-status=live |archive-url=http://web.archive.org/web/20251210214146/https://www.tomsguide.com/news/own-an-insta360-camera-this-flaw-could-let-anyone-access-your-photos-and-videos |archive-date=10 Dec 2025}}</ref><ref>{{Cite web |last=Limer |first=Eric |date=2022-08-29 |title=Vulnerability in Insta360 Cameras Lets Anyone Download Your Photos |url=https://petapixel.com/2022/08/29/vulnerability-in-insta360-cameras-lets-anyone-download-your-photos/ |url-status=live |archive-url=http://web.archive.org/web/20251030035742/https://petapixel.com/2022/08/29/vulnerability-in-insta360-cameras-lets-anyone-download-your-photos/ |archive-date=30 Oct 2025}}</ref><ref>{{Cite web |last=Haile |first=Allen |date=2022-09-06 |title=ScrewX2 and the Insta360 WiFi security hole |url=https://subethasoftware.com/2022/09/06/screwx2-and-the-insta360-wifi-security-hole/ |url-status=live |website=Sub-Etha Software |archive-url=http://web.archive.org/web/20251017164437/https://subethasoftware.com/2022/09/06/screwx2-and-the-insta360-wifi-security-hole/ |archive-date=17 Oct 2025}}</ref>
 ===Content Creator controversy (''2024'')===