cyber security, Google, Google Nest, hacking smart device, IP Camera, Privacy, Privacy Breach, smart home, smart home assistant, Xiaomi

Xiaomi Cameras Connected to Google Nest Expose Video Feeds From Others

Internet-connected devices have been one of the most remarkable developments that have happened to humankind in the last decade. Although this development is a good thing, it also stipulates a high security and privacy risk to personal information.

In one such recent privacy mishap, smart IP cameras manufactured by Chinese smartphone maker Xiaomi found mistakenly sharing surveillance footage of Xiaomi users with other random users without any permission.

The issue appears to affect Xiaomi IP cameras only when streamed through connected Google’s Nest Hub, which came into light when a Reddit user claimed that his Google Nest Hub is apparently pulling random feeds from other users instead of his own Xiaomi Mijia cameras.

The Reddit user also shared some photos showing other people’s homes, an older adult sleeping on a chair, and a baby sleeping in its crib that appeared on his Nest Hub screen.

It appears the issue doesn’t reside in Google products; instead, it could be a bug in the way Xiaomi implemented the connection between its smart cameras and Nest Hub.

In a statement provided to Android Police, Google said it is aware of the issue and is in contact with Xiaomi to fix the problem, however, Xiaomi hasn’t yet responded.

Web Application Firewall

As a precaution, Google has also temporarily disabled Xiaomi devices’ access to its Nest Hub and Assistant applications.

Though the bug doesn’t appear to affect all Xiaomi cameras integrated with Google Nest Hub, users are still recommended to unlink their cameras from Google Nest Hub until a patch arrives.

//l&&!o&&(jQuery.ajax({url:”https://thehackernews.com/feeds/posts/default?alt=json-in-script&max-results=4″,type:”get”,cache:!1,dataType:”jsonp”,success:function(e){for(var t=”http://thehackernews.com/”,r=”http://thehackernews.com/”,s=0;s<e.feed.entry.length;s++){for(var a=0;a<e.feed.entry[s].link.length;a++)if("alternate"==e.feed.entry[s].link[a].rel){t=e.feed.entry[s].link[a].href;break}if("content"in e.feed.entry[s])var n=e.feed.entry[s].content.$t;else n="summary"in e.feed.entry[s]?e.feed.entry[s].summary.$t:"http://thehackernews.com/";100<(n=n.replace(/]*>/g,”http://thehackernews.com/”)).length&&(n=n.substring(0,90));var l=e.feed.entry[s].title.$t;l=l.substring(0,50);var o=e.feed.entry[s].media$thumbnail.url.replace(//s72-c-e100/,”/s260-e100″);o=o.replace(/http://1.bp.blogspot|http://2.bp.blogspot|http://3.bp.blogspot|http://4.bp.blogspot|https://2.bp.blogspot|https://3.bp.blogspot|https://4.bp.blogspot/,”https://1.bp.blogspot”),r+=’

“}r+=”http://thehackernews.com/”,document.getElementById(“result”).innerHTML=r}}),e=window,t=document,r=”script”,s=”stackSonar”,e.StackSonarObject=s,e[s]=e[s]”http://thehackernews.com/”function(){(e[s].q=e[s].q”http://thehackernews.com/”[]).push(arguments)},e[s].l=1*new Date,a=t.createElement(r),n=t.getElementsByTagName(r)[0],a.async=1,a.src=”https://www.stack-sonar.com/ping.js”,n.parentNode.insertBefore(a,n),stackSonar(“stack-connect”,”233″),o=!0)})});
//]]>
https://platform.twitter.com/widgets.js

Source link

Leave a Reply

Your email address will not be published. Required fields are marked *

eighteen − 14 =

This site uses Akismet to reduce spam. Learn how your comment data is processed.