Amazon Doorbell Snitches

Pains me to repeat 'Which' findings, but ...

"Amazon smart doorbells can have ?critical vulnerability? that can give criminals access to people?s homes"

formatting link
Not that surprised, the entire range of IoT devices is suspect, particularly those that use hosted services to function.

Use of default passwords to be made illegal apparently.

Reply to
Adrian Caspersz
Loading thread data ...

About time that happened.

I liked the story about Amazon doorbless catching fire spectacularly if you lost the security screw from the bottom and replaced it with an overly long woodscrew which shorts out the lithium battery.

formatting link
It seems to me that the doorbell was punishing stupidity!

Reply to
Martin Brown

How ?

Reply to
Jethro_uk

How would you get into the device to set your own password without a default factory one?

Reply to
Dave Plowman (News

Use a random one that's printed on a sticker with the device, or use one that's based on a serial number or hardware address burnt into the device itself.

Reply to
Andy Burns

I suspect that statement was meant to pacify the masses rather than indicate any serious ongoing developments ....

Reply to
Jethro_uk

That's how BT do it with their smart hubs.

Reply to
Richard

They claimed about six months ago that they had closed the loophole, but there is nothing totally secure, as if somebody can build it somebody can subvert it. Brian

Reply to
Brian Gaff (Sofa

Yes reminded me of Mission Impossible this doorbell will destruct in.....

Brian

Reply to
Brian Gaff (Sofa

Unfortunately though you cannot legislate against peoples ideas of secure passwords, but I would venture that if anyone hacks your device through its changed password, you had best look close to home for the culprit, or you have not been shredding your bits of paper. Brian

Reply to
Brian Gaff (Sofa

That would make for a nice little Ebay business - like car radio decoding. ;-)

Reply to
Dave Plowman (News

I believe the most common user created password is "password"

Reply to
charles

There is much discussion online of police access to various Amazon/Ring doorbell devices - especially ones with webcams that could be of interest.

I wouldn't touch one with your bargepole.

There again, I can't see any reason to go for a device with anything beyond a classic dumb ringer. For me, in my circumstances.

Reply to
polygonum_on_google

The same way as a lot of (all?) routers now come with a unique password rather all of them being shipped with the same username and password.

Reply to
alan_m

I don't know if the newer rings contact your phone any faster than the original ones? but they got panned for being slow. So you annoy the delivery driver by making them wait to answer, then you ask them to leave the parcel next door which is what they'd likely have done anyway...

Reply to
Andy Burns

No, I was asking how *the law* would work.

Reply to
Jethro_uk

I meant a solenoid, a dome-like bell, a power supply and a make/break switch. No transistors. No logic gates.

Speed almost entirely based on local speed of sound.

Reply to
polygonum_on_google

Quite possibly true, however this is a very sloppy bit of journalism, creating a false impression that its Amazon's own range of devices being discussed rather than knock-offs that look similar and are sold by marketplace sellers.

Reply to
John Rumm

By ensuring each device has a unique admin password on delivery. That way should the user fail to change it (as it frequently the case) its not left wide open to anyone who can guess or lookup the default password.

Reply to
John Rumm

What if the "unique" admin password is simply the serial number (and thus potentially available in any number of ways to a miscreant) ?

Reply to
Jethro_uk

HomeOwnersHub website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.