Disabling cloud storage is also ineffective. Anker's Eufy surveillance camera is directed to the cloud to send data.
CTOnews.com November 30 news, citing foreign technology media MacRumors reported that security consultant Paul Moore (Paul Moore) said in a demonstration video released last week that Anker's Eufy-branded security surveillance camera will still send some data to the cloud when cloud storage is disabled and local-only storage is enabled.
In the video, Moore demonstrates Eufy's unauthorized upload of cloud data. Although the Eufy Doorbell Dual he bought does not register for a cloud service, the surveillance camera still uploads videos to the cloud. Even if the relevant surveillance video is deleted in the Eufy app, it can still be accessed in the cloud. It's worth noting that Eufy doesn't seem to automatically upload the full streaming video to the cloud, but instead captures the video as a thumbnail.
CTOnews.com learned that Moore later consulted Anker about the matter. Eufy confirmed in its reply that it is uploading event lists and thumbnails to AWS, but the system's security mechanism restricts these URL so that I can access the data for a limited time only if the account is logged in, so that it will not be "leaked to others".
In a subsequent statement, Anker acknowledged that the problem did exist and would take the following two steps:
1. We are modifying the push notification option language in the eufy Security application to specify that push notifications with thumbnails need to preview images, which will be temporarily stored in the cloud.
two。 We will explain the use of cloud push notifications more clearly in consumer-oriented marketing materials.