Video doorbells are supposed to help keep your home safe from strangers. Thanks to poor software security, however, they could be letting strangers in.
In a case of “you get what you pay for,” researchers at Consumer Reports have uncovered vulnerabilities in popular video doorbells on major online retail sites including Amazon, Walmart and Temu, according to a report released February 29. Hackers could use a companion app to take over the devices and view camera footage, the report found.
As the Washington Post reports, the doorbells were sold under a variety of brand names, mainly Eken and Tuck, on Amazon, Walmart, Sears, Shein and Temu. All the doorbells paired with the app Aiwit and were manufactured by the Chinese company Eken Group Ltd., Consumer Reports said. Some doorbells were also missing a registration code required by the Federal Communications Commission (FCC).
This finding is the latest example of how tough it is to vet products we buy online. Buggy software in off-brand smart devices is a recurring problem, but digital marketplaces such as Amazon have done little to rein in offending manufacturers. Combine that with sponsored search results and opaque labeling – Amazon repeatedly called the Eken doorbells an “Amazon’s Choice: Overall Pick” – and shoppers have little recourse to figure out which devices are safe.
Despite the explosion of internet-connected smart home devices, software security has been slow to catch up. Smaller brands churn out smart lightbulbs and speakers to compete with bigger companies, often cutting corners on security. Big brands, meanwhile, do a better job with security but create new privacy concerns – do we really want Amazon peeking into every corner of our homes? Efforts to label consumer tech with simple security facts have languished.
Meanwhile, large online marketplaces put unvetted gadgets in front of millions of shoppers. In January alone, Amazon sold 4,200 Eken doorbells under 11 product listings, according to Consumer Reports. Whether you’re shopping for smart home tech or a simple tank top, having to navigate a sea of unfamiliar brands and dubious product reviews is now common. Online retailers need to do more to keep shoppers safe from scams and low-quality products, the Consumer Reports authors wrote.
If you bought a vulnerable doorbell from one of these marketplaces, consider switching to a larger, better-vetted brand such as Ring or Nest. One thing is clear: Deciding who gets to peek into our homes (even the front stoops) is sensitive. And camera-enabled doorbells are a bad spot for unsafe software.
—
Photo Credit: BrandonKleinVideo / Shutterstock.com