Playing devil’s advocate, I suspect this might not be as bad as it sounds. Just like the previously discussed flaw [1] it starts with logging in to the cloud da

Playing devil’s advocate, I suspect this might not be as bad as it sounds. Just like the previously discussed flaw [1] it starts with logging in to the cloud dashboard. Presumably when you open a stream, it uses your current session to derive the decryption key, and then provide a URL to stream the video (how else would you do this in the browser?). This is a non-guessable URL with a short expiry. tl;dr you won’t be accessing anyone’s camera feed anytime soon unless you obtain their credentials. In normal usage, without the web UI, hopefully there is no streaming to the cloud at all. Should be easy to verify by watching network traffic, but this is where one would hope Anker to step in and communicate clearly… why would they not? [1] https://news.ycombinator.com/item?id=33721304 https://news.ycombinator.com/item?id=33721304