Home cameras spy on families: Major privacy flaws found

A recent security assessment conducted by the Consumer Agency has uncovered alarming privacy exposures in 30% of home IP cameras. These devices, often used for monitoring infants, children, and pets, presented significant risks of unauthorized viewing and data extraction. The investigation found that all ten IP camera products subjected to testing had vulnerabilities.

Three specific models—Roboview (GI-ROBOA7), VStarcam (VSTARCAM-800X), and FineVu (K11)—were identified as having critical weaknesses in user authentication. These flaws could permit attackers to view live video, steal cloud-stored images, and even gain remote control over camera functions. For instance, manipulating the unique ID on the Roboview model allowed unauthorized viewing of other users' live feeds.

Further security gaps were noted across multiple brands. Eight models lacked secure communication protocols, risking data leakage during transmission. Four models had exposed test ports, enabling potential access to internal systems. Additionally, all 10 models featured insufficient security in their internal operating software and weak mobile app protections. Five models also failed to implement secure password standards, and six had unclear security update support periods, leaving users vulnerable to unpatched exploits.