5 ms·
Yeah. As a Eufy owner I'm not really concerned about the thumbnails, especially since they can be turned off. The video streaming is of more concern, but the
by silisili 4y ago
Yeah. As a Eufy owner I'm not really concerned about the thumbnails, especially since they can be turned off.
The video streaming is of more concern, but the reporting has been really weird and bad about it. Why do they keep mentioning VLC like it's some secret hacker tool? If unencrypted, why do they mention a shared AES key?
Really wish a reliable source would give more details.
- dannyw 4y agoEncrypting something with the same key, that is public, is functionally equivalent to unencrypted. It's like saying we pay our interns, but the payment is $0.01 per century. It's not true.
- thaumasiotes 4y ago> It's like saying we pay our interns, but the payment is $0.01 per century. https://dilbert.com/strip/2009-01-11 https://dilbert.com/strip/2009-01-11
- drew-y 4y ago> Wasabi also noted that the way the remote URLs are configured, there are only 65,535 combinations to try, "which a computer can run through pretty quick.") - From the ars article It's a bit confusing, but I think they what they are implying is that there is a total of 65,535 possible keys. Devices may be assigned one of those randomly. The URL must send the key and some sort of device ID. It's possible that if you know the device ID, it would only take 65,535 attempts to gain access to the stream.
- d4mi3n 4y agoDid I miss something? I didn’t see anything explicitly stated, but I took that number to mean that Wasabi was doing simple port enumeration—there are only 65,535 ports that need to be checked to enumerate a TCP network interface. Edit: I did miss a key paragraph—they keys are also 16 bits–port enumeration was just the first place my mind went.