Skip to main content

WyzeCam’s security flaw should not have been kept secret

When you put a security camera in your home, it’s to keep an eye on things for yourself — not to let hackers peer through the internet into your home.

The possibility that someone is on the other side of that blackened camera lens has long been a concern for many homeowners, and one of the reasons that smart home technology has yet to fully catch on. The potential privacy implications are enormous, but companies have constantly reassured consumers that any vulnerabilities were patched and that users were safe.

All companies except Wyze, apparently.

The WyzeCam sits on a desk with a camera in the background.
Daven Mathies/Digital Trends

Sweeping security under the rug

Earlier this year, Wyze discontinued the WyzeCam v1 without much explanation. Not much was made of it; with the availability of the WyzeCam v3, discontinuing an earlier model seemed like an obvious decision.

But on March 29, the security firm Bitdefender revealed another possible reason the company stopped selling the camera: A security vulnerability that made it possible for hackers to access the camera over the internet, make off with your encryption key, and even download the camera’s video feed.

Prime Day Focus
Roborock Prime Day shopping guide: Lots of options, which is right for you?
Is the Bluetti AC200L the best power station for camper vans?
These Razer Blade Prime Day deals really pack a punch [in gaming power]
Tiny projector, epic 4K cinema: Watch movies anywhere with LG CineBeam Q

Bitdefender says the issue was brought to Wyze’s attention in 2019. If true, Wyze has known about this security flaw for three years, but consumers have not.

Wyze made a statement that “continued use of the WyzeCam after February 1, 2022, carries increased risk, is discouraged by Wyze, and is entirely at your own risk.” There was no explanation of why the message was sent, nor any acknowledgement of the potential risk consumers have faced over the past several years.

A close-up of the Wyze Cam v3.
John Velasco / Digital Trends

The issue has been patched out of WyzeCam v2 and v3, but that’s not enough. When a security flaw this large is discovered, it should be acknowledged and corrected, even if products need to be recalled.

A summary of the problem in non-technical terms: Hackers could access the camera without verifying their identity by accessing a specific port due to the way SD cards are addressed within the system. According to BleepingComputer, this part of the problem was fixed on September 24, 2019.

Another part was corrected with an update on November 9, 2020, a full 21 months after its initial discovery. The largest part of the exploit — the ability for hackers to access content on your camera’s SD card — wasn’t corrected until January 29, 2022.

Let me point out something important here: These security updates are only available on the WyzeCam v2 and v3. The WyzeCam v1 is still vulnerable and always will be. If you are using one of these devices, you might want to consider unplugging it and tossing it — perhaps from a third-floor window?

It’s not the first time

No device is entirely invulnerable to hackers. Ring has suffered from vulnerabilities in the past, and in November 2021, a smart home network in South Korea experienced one of the most widespread security breaches of any smart device yet.

In 2018, a man claimed a hacker spoke to him through his Nest IQ Cam. The difference is this hacker warned the man that his device was vulnerable and suggested security improvements, then apologized for startling him.

The Nest Cam IQ in a home.
Terry Walsh/Digital Trends

The next time Nest was hacked (in 2019), the end result wasn’t quite as heartwarming. A family in Illinois were taunted by a hacker who shouted racial slurs at them through their camera, before the hacker hijacked the smart thermostat and turned the temperature in the home up to 90 degrees.

Wyze isn’t the first company to suffer from security vulnerabilities, but it is the first company (as far as we know) that seemed to completely ignore the problem. Ring and Nest recognized the flaws, apologized, and sought to correct the issue. Wyze’s radio silence on this issue is concerning and sets a poor precedent for consumer trust.

What you can do

Security cameras still have a place in the home. There are a lot of strong reasons to continue using cameras, whether you’re keeping an eye on your pets or watching over an elderly relative. There are plenty of brands to choose from that haven’t suffered horrible security breaches.

You just need a security camera with a physical privacy shutter. A mechanical shutter means you know exactly when the camera is streaming and when it isn’t. The opening of the shutter is often accompanied by an audible click or a chime from the camera.

Most cameras with physical privacy shutters let you automatically shut them when the camera isn’t in use. Even smart displays like the Echo Show 15 have a privacy shutter, although that one has to be opened and closed by hand.

You should also make conscious decisions when shopping for a home security camera. Research what brands value privacy the most. Accidents and hacks will happen — that’s unavoidable. What matters is how the companies react. Do they acknowledge the problem and strive to fix it, or do they pretend there is no problem and leave their customers vulnerable?

My WyzeCam is unplugged. And it will remain that way until I feel assured the problem is truly fixed.

Topics
Patrick Hearn
Former Digital Trends Contributor
Patrick Hearn writes about smart home technology like Amazon Alexa, Google Assistant, smart light bulbs, and more. If it's a…
The TP-Link Tapo C120 is an affordable security camera designed for all environments
The Tapo C120 installed on a fence.

Tapo, a TP-Link brand known for crafting affordable smart home products, has just launched the C120 Indoor/Outdoor Home Security Camera. The Tapo C120 carries a low price of $40, but it's packed full of sought-after features like 2K video capture, HD night vision, and IP66 weatherproofing.

Tapo designed the C120 to be cheap to purchase and convenient to install anywhere on your property. Along with its affordable price, the camera includes a 9.8-foot power cord to reach far-away outlets. It's also built with a magnetic base that lets you quickly mount it to metal surfaces. If you can't find any metal on your property or in your home, you can use the included flexible mount.

Read more
Arlo enhances home security offerings with new Arlo Total Security plans
The Arlo Total Security package on a blue background.

Arlo is expanding its home security offerings with the new Arlo Total Security subscriptions. These plans start at $10 per month and provide members with not just professional monitoring services, but also all the hardware they need to secure their property.

Not to be confused with the existing Arlo Secure lineup, Arlo Total Security plans are an entirely new set of monthly subscriptions. There are three tiers to choose from, though all include professional monitoring, hardware (such as sensors and cameras), and free shipping. The cheapest tier is Starter at $10 per month, featuring a security keypad, All-In-One Sensor, and Yard Sign. The Advanced with Video plan is the most expensive at $50 per month and is loaded with cameras and sensors.

Read more
New Wyze Video Doorbell v2 offers microSD card slot, 2K resolution for just $40
The Wyze Video Doorbell v2 installed near a front door.

Wyze is a popular destination for smart home shoppers seeking premium features on a budget, and the new Wyze Video Doorbell v2 might be its most enticing product yet. Not only does it capture 2K footage and offer free 12-second video recording, but it also features a microSD card slot for local storage -- all for just $40.

That's an impressive list considering its low price. The microSD card slot is the big selling point, as few products in this price range offer the coveted feature. Having a video doorbell with an onboard microSD slot means you can record continuous footage both day and night. When the sun goes down, it also offers color night vision for improved clarity.

Read more