Skip to main content

Rings finally adds end-to-end encryption to wireless cameras, but there's a catch

Home security brand Ring is expanding end-to-end encryption (also known as E2EE) support to more devices while also introducing a new data transfer feature. It's a welcome security update, but it also forces the deactivation of some useful Ring features.

Previously, E2EE was only available to wired products like the Ring Video Doorbell Pro and Floodlight Cam. Now that support is migrating over to Ring’s wireless cameras and doorbells. However, it’s unknown if everything in the lineup will get it. Nowhere in the announcement does it say whether or not all wireless devices will have the E2EE support; although there are reports stating the support is indeed universal. We reached out to the company to see if it could clear up this confusion. This story will be updated if we hear back.

As for the new data transfer tool, it’s called Deactivated Device State. It allows users to save past recordings from an old Ring device to their account. This way, you don’t have to manually download every single video one by one. Users must stay a Ring subscriber to use this tool, however. Otherwise, they’ll have to download everything to their local computer before the company deletes the videos. 

Instructions on how to save recordings and deactivate devices can be found on Ring’s website. It'll involve updating the Ring mobile app and going into a device's personal settings to keep events.

End-to-end encryption

Either way, if you do have a wireless Ring camera or doorbell, we recommend updating the mobile app to see if the E2EE is available. The company has a set of instructions on its website that detail how to set up end-to-end encryption. Similar to Deactivated Device State, you'll have to update the app and go into the Control Center. From there, activate E2EE, create a passphrase, and then add whichever devices you want.

It's worth enabling E2EE is because, somewhat obviously, it improves Ring Device security. Videos recorded on Ring cameras are uploaded to the company’s cloud storage which, as it turns out, isn’t the most secure. The company has a history of security problems from 1,500 passwords leaking onto the dark web to possibly giving hackers a way to steal Wi-Fi from houses. 

With end-to-end encryption, your recordings have their data protected and unreadable. No one – not Ring, Amazon, hackers, or even the government – can view your encrypted videos. All they’ll get is a jumbled mess of data. Only the Ring user and their connected device can view recorded videos.

That said, there’s a catch to having this level of security. End-to-end encryption on Ring devices actually disables many features including Bird’s Eye View, Virtual Security Guard, Event Timeline, and Alexa Greetings just to name a few. The full list of disabled features can be found on the company website. Users will essentially have to ask themselves whether the better security is worth the loss of convenience. 

Given Ring's history, it may be better to opt for security.

Room for improvement

Expanded E2EE support and the new data transfer feature are great and all, but Ring still has room for improvement. Cybersecurity research firm Checkmarx recently discovered a vulnerability within the Ring Android app that could allow “threat actors to steal identity data including geolocation and camera recordings.” On top of that, it might be possible for someone to upload malware to an Android phone via this vulnerability and steal even more sensitive data, including addresses.

And what’s scary is that theRing  Android app has more than 10 million downloads. Now that end-to-end encryption is available to most of RIng’s offerings, perhaps it’s time for the company to patch the holes in its own security and stop the constant leaks.

If you’re interested in beefing up your home security, be sure to check out TechRadar’s list of the best home security systems of 2022.



Source: TechRadar

Popular posts from this blog

Yandex spins out self-driving car unit from its Uber JV, invests $150M into newco

Self-driving cars are still many years away from becoming a ubiquitous reality, but today one of the bigger efforts to build and develop them is taking a significant step out as part of its strategy to be at the forefront for when they do. Yandex — the publicly-traded Russian tech giant that started as a search engine but has expanded into a number of other, related areas (similar to US counterpart Google) — today announced that it is spinning out its self-driving car unit from MLU BV — a ride-hailing and food delivery joint venture it operates in partnership with Uber. The move comes amid reports that Yandex and Uber were eyeing up an IPO for MLU  last year. At the time, the JV was estimated to be valued at around $7.7 billion. It’s not clear how those plans will have been impacted in recent months, with COVID-19 putting huge pressure on ride-hailing and food-delivery businesses globally, and IPOs generally down compared to a year ago. In that context, spinning out the unit could

Slack’s new integration deal with AWS could also be about tweaking Microsoft

Slack and Amazon announced a big integration late yesterday afternoon. As part of the deal, Slack will use Amazon Chime for its call feature, while reiterating its commitment to use AWS as its preferred cloud provider to run its infrastructure. At the same time, AWS has agreed to use Slack for internal communications. Make no mistake, this is a big deal as the SaaS communications tool increases its ties with AWS, but this agreement could also be about slighting Microsoft and its rival Teams product by making a deal with a cloud rival. In the past Slack CEO Stewart Butterfield has had choice words for Microsoft saying the Redmond technology giant sees his company as an “existential threat.” Whether that’s true or not — Teams is but one piece of a huge technology company — it’s impossible not to look at the deal in this context. Aligning more deeply with AWS sends a message to Microsoft, whose Azure infrastructure services compete with AWS. Butterfield didn’t say that of course

Xbox One S vs. Xbox One X: Which should you buy?

http://bit.ly/2v1agl5 We live and breathe tech, and also gaming, with every member of Windows Central rocking either an Xbox One console or PC gaming rig. We've compared and contrasted every iteration of Xbox One to bring you this guide. Xbox One X Raw 4K power From $299 at Amazon Pros Has thousands of games 4K media apps, Blu-ray discs, and games IR blaster for TV controls, Amazon Echo for voice controls Improved HDD speeds for faster loading times Cons More expensive at around $500 RRP Requires a 4K TV to get the most out of it The Xbox One X is the world's most powerful games console, running the latest games with the crispest, detailed visuals on TV sets with 4K HDR support. Xbox One S More affordable From $226 at Amazon Pros Has thousands of games 4K media apps and Blu-ray IR blaster for TV controls, Amazon Echo for voice controls More affordable at around $300 RRP Cons No 4K games Games run worse, even on a 1080p TV The Xbox One S i

Elon Musk sends yet another notice trying to terminate the Twitter deal

Kristen Radtke / The Verge; Getty Images Elon Musk has sent a third letter to Twitter attempting to terminate his $44 billion acquisition of the company . Musk’s legal team cited Twitter’s multimillion dollar severance payment to former security chief and whistleblower Peiter Zatko as a violation of the merger agreement and a reason to end the deal. The letter, dated September 9th, was sent to Twitter’s chief legal officer Vijaya Gadde, and was included in a filing Twitter made with the SEC on Friday (which you can read at the bottom of this article). Last month, Zatko made headlines by accusing Twitter of misleading investors about the number of bots on the service, failing to delete users’ data, and having poor security practices, among other things. Musk jumped on the accusations, citing them in his second termination letter and subpoenaing Zatko to testify in the lawsuit. Zatko was set to be deposed on Friday. Elon Musk sent his first letter of termination in July , say