Wyze: Difference between revisions

Revision as of 05:44, 19 January 2025

Wyze Cloud Security Camera Breach

Incident

On two separate occasions from September 2023 to February 2024, Wyze personal security cameras were able to be accessed by other owners due to security failures.

In early September 2023, many Wyze security camera users reported being able to see the feeds of cameras that were not their own. A Wyze spokesperson reported this was due to a "web caching issue and is now resolved." Users throughout social media platforms such as Twitter and Reddit reported this issue and within 30 minutes, the camera view portal was shut down.^[1]

In late February 2024, after bringing servers back from a company outage, about 13,000^[2] users were able to view thumbnails from another users cameras with about 1,500^[2] being able to view the video.^[3]^[4]

Implications

Security cameras are a tool used by those looking for companies to make resources to protect them. These incidents show Wyze security cameras did not have the capabilities to protect their users. The Verge reports Wyze was aware of security flaws in the WyzeCam v1 cameras for more than 4 years but discontinued the product rather than fixing the issue.^[1] Discontinuing the product does not help those who already own the product, and it is the nature of cloud cameras that the consumer must trust companies to deliver the proper security patches to protect their private information.

"Bait and Switch" style behavior

When Wyze and Wyze v2 cameras were popularized in 2018 and prior, they were sold under the premise that 24h recording or infinitely long video clips are a subscription add-on, but short video clips would be included for free using their cloud service.

Sometime between 2020 and 2022 this video clip service became a subscription for $1.99 per camera^[5]

Likely to prevent legal action, they released a "cam plus lite" package^[6], but enabling this feature is buried in menus and sub-menus in the online application. To date there's no way to enable it in the phone app which is the main way users access their cameras. Users can however pay monthly for the same or similar service from the phone app.

[:0-1] 1.0 ^1.1 https://www.theverge.com/2023/9/8/23865255/wyze-security-camera-feeds-web-view-issue

[:1-2] 2.0 ^2.1 https://www.reddit.com/r/wyzecam/comments/1aulfw4/i_was_watched_by_someone/

[3] ttps://www.youtube.com/watch?v=RkZl7FBipXA

[4] ttps://www.cnn.com/2024/02/20/tech/wyze-breach-camera/index.html

[5] ttps://forums.wyze.com/t/bait-and-switch/221810

[6] ttps://www.wyze.com/pages/cam-plus-lite

[1]

[2]

[3]

[4]

[5]

[6]

@@ Line 1: / Line 1: @@
-= Wyze Cloud Security Camera Breach =
+== Wyze Cloud Security Camera Breach ==
-== Incident ==
+=== Incident ===
 On two separate occasions from September 2023 to February 2024, Wyze personal security cameras were able to be accessed by other owners due to security failures.
@@ Line 8: / Line 8: @@
 In late February 2024, after bringing servers back from a company outage, about 13,000<ref name=":1">https://www.reddit.com/r/wyzecam/comments/1aulfw4/i_was_watched_by_someone/</ref> users were able to view thumbnails from another users cameras with about 1,500<ref name=":1" /> being able to view the video.<ref>https://www.youtube.com/watch?v=RkZl7FBipXA</ref><ref>https://www.cnn.com/2024/02/20/tech/wyze-breach-camera/index.html</ref>
-== Implications ==
+=== Implications ===
 Security cameras are a tool used by those looking for companies to make resources to protect them. These incidents show Wyze security cameras did not have the capabilities to protect their users. [https://www.theverge.com/ The Verge] reports Wyze was aware of security flaws in the WyzeCam v1 cameras for more than 4 years but discontinued the product rather than fixing the issue.<ref name=":0" /> Discontinuing the product does not help those who already own the product, and it is the nature of cloud cameras that the consumer must trust companies to deliver the proper security patches to protect their private information.
-<references />
+== "Bait and Switch" style behavior ==
+When Wyze and Wyze v2 cameras were popularized in 2018 and prior, they were sold under the premise that 24h recording or infinitely long video clips are a subscription add-on, but short video clips would be included for free using their cloud service.
+Sometime between 2020 and 2022 this video clip service became a subscription for $1.99 per camera<ref>https://forums.wyze.com/t/bait-and-switch/221810</ref>
+Likely to prevent legal action, they released a "cam plus lite" package<ref>https://www.wyze.com/pages/cam-plus-lite</ref>, but enabling this feature is buried in menus and sub-menus in the online application. To date there's no way to enable it in the phone app which is the main way users access their cameras. Users can however pay monthly for the same or similar service from the phone app.
 [[Category:Companies]]