The Red and The Black

There is no information in this announcement--not even a teaser.

Edit- I'm looking more into 12Security, and they seem sketchy too. But IPVM seems to lend enough credit to take this seriously.

---

Full information is available at the following two blog posts, with more to come:

https://blog.12security.com/wyze/

https://blog.12security.com/wyze-essay-2-aresflare/ (many technical details here)

It also seems like a WSJ journalist has been helping on this (since they were compromised), so if this is real I'd expect an article soon.

"I'm not blaming business leaders per se, as they are at the mercy of large historical and economic forces that limit what can influence them and the options open to them to choose"

I'm frustrated by the continued conflation of understandability and excusability. A band robber's motives are understandable, but we don't excuse them. However, while the systemic forces acting on business leaders make it understandable when they make mistakes, but we must draw a sharp line between understanding and excusing.

We can't credit leaders in good times, while also excusing them when systemic failures corrupt them.

There is a good reason many of us have been flashing it with dafang hacks from https://github.com/EliasKotlyar/Xiaomi-Dafang-Hacks

I wanted to purchase a few of the Wyze cameras for my house because of the price ~$20 each. At first, I thought this price could be a loss-leader strategy for more lucrative services (premium or longer cloud storage), kind of like Ring but with much cheaper hardware. Alas, when I found out that the cloud storage is free for 30 days I was skeptical. How would you make money from this sale?

I'm not a paranoid person. I do have Ring doorbell, a P.O.S Samsung camera and Alexa in my house. My rationale is that since those cameras are for outside of my home, I wouldn't care about being spied upon. But if the Wyzes are used by the CCP for surveillance foreign territories, this could spell a lot of trouble. For example, a week prior to the Pearl Harbor event, the imperial Japan phoned Japanese-American in Hawaii to ask about the weather, troop movement, military vehicles movement. I can't imagine if those outside cameras are used for the purpose, the intelligence gathered is paramount.

You could argue that since everybody is carrying a smartphone with camera nowadays, it wouldn't take much effort to "spy" foreign territories simply by checking social media uploaded. While it is true, would it be more devastating if they can see every thing anytime/anywhere they want?

The forum post at https://forums.wyzecam.com/t/updated-12-29-19-data-leak-12-2... has all the details from the company's perspective. The rest seems like scare-mongering to me.

The intent of the post is not about security vulnerabilities but actual espionage, it will be beneficial if the author simply presented the whole case instead of providing a teaser like this. They could have purchased a catchy URL, as is the standard practice nowadays, but it’s good to always come out with the proper case. Ow with this teaser I cannot help but think that it’s more of a PR move, unless proven otherwise.

That's a shame because I always liked their terminals and keyboards. Oh, wait.

This title was changed from something informative to something that says nothing about the story at hand.

@dang although the title of the post is from the article itself, it is not descriptive of what it is. I liked previous title more.