Ubiquiti Users Somehow Being Fed Access to Strangers' Security Cameras

whfsdude@dmv.social to Technology@lemmy.world – 241 points –
Ubiquiti Users Somehow Being Fed Access to Strangers' Security Cameras
404media.co
36

You are viewing a single comment

If you can access the data, so can someone else.

Yep, just confirmed there is no end-to-end encryption and that they can see anyone's cameras at any time (or anyone that compromised ubnt)

That's not true! I bet you can't see this comment cuz I'm real super sneaky on the security.

bFxPnS*Z4

Shit, I accidentally pasted my password into a comment again. Guys? How do you delete a password from a comment?

Hey, Lemmy's security works awesome! All I see is

'********

Hey, someone else try posting their password here to see if it works!

Jokes on you, my password is just 8 asterisks... Wait crap.

Brb changing all my passwords.

Actually, it's a best practice to not reuse passwords, so any site would block you from reusing one! You're fine.

1 more...
1 more...

The only safe data is data that no one can access, including yourself?

Best place to start if you're taking security seriously; Implementing file encryption for example has to start with "I would rather that I myself potentially lose access to this data than for it to possibly fall into another person's hands."

When I lose things it's almost always because I've put them in a safe place. Safe from me!

But yeah it's really about factoring in likelihood and opportunity. I think it helps to compare physical and digital spaces. If you have a CCTV system, then anyone could watch the monitors and see what's happening - however they'd have to get into the building, find their way to the secure room, log in to the system, etc. When something is online it creates better opportunity for surreptitious access and also greater likelihood in terms of the number of people who could potentially come across it. While in the physical space you might get away with having staff control access during the day and locking the door at night, online you have to have far more robust security measures to achieve the same level of safety.

So it's maybe better to say: the easier it is for you to access data, the easier it is for someone else to.

1 more...