A Ring doorbell vulnerability lets people snoop even after a password change

Ring is promising to do better, and urges folks not to share login details

ring video doorbell 2 box
Bill Roberson/Digital Trends

Video doorbells may be cutting down on the amount of time you have to spend running to and from your front door, but they could also be cutting down on the amount of privacy you have in your home. As per a new report from The Information, a major security flaw in popular video doorbells from Ring, the company recently acquired by Amazon for $1 billion, does not require users to re-log into the doorbell app when a password has been changed.

That means that if you’d previously granted access to your Ring doorbell app to say, a significant other, but then wanted to revoke that access after your relationship went sour, he or she would still actually be able to monitor the activity taking place outside your front door. Worse yet, it didn’t matter how much time passed — the app never asked users to sign in again after a password change.

While Ring was notified of the issue beginning in January and claimed to have removed users who were no longer authorized, The Information tested this vulnerability and found that for “several hours,” users were still able to access the app after a password change. Ring’s CEO Jamie Siminoff has even acknowledged the ongoing issue, as kicking users off the platform apparently slows down the Ring app. That said, this window of time presents a serious problem — not only could someone be watching your front door, but he or she could also download videos, or otherwise control the doorbell as an administrator.

This doesn’t bode particularly well for Amazon, which was planning to use Ring video doorbells as part of a secure solution for delivery programs like Amazon Key, which allows delivery personnel to drop off packages directly into someone’s home. But if Ring doorbells can’t even protect against an ex-boyfriend, it will be difficult for Amazon to convince customers that they’ll protect against other ill-intentioned actors.

Ring has since issued a statement with regard to the security exploit, noting that further security measures are on their way. In the meantime, you should do what you can to avoid giving unnecessary actors access to your doorbell.

“Ring values the trust our neighbors place in us and we are committed to the highest level of customer information and data security,” the company said. “We strongly recommend that customers never share their username or password. Instead, they should add family members and other users to their devices through Ring’s ‘Shared Users’ feature. This way, owners maintain control over who has access to their devices and can immediately remove users. Our team is taking additional steps to further improve the password change experience.”

Updated on May 13: Added statement from Ring. 

Emerging Tech

Awesome Tech You Can’t Buy Yet: Write music with your voice, make homemade cheese

Check out our roundup of the best new crowdfunding projects and product announcements that hit the web this week. You may not be able to buy this stuff yet, but it sure is fun to gawk!
Smart Home

Protect yourself: Here are some of the best home security systems

Looking for the best home security systems for your house? These systems offer the best mix of devices, smart features, monitoring services, and fees that you can afford (plus good customer service reports).
Computing

Secure your Excel documents with a password by following these quick steps

Excel documents are used by people and businesses all over the world. Given how often they contain sensitive information, it makes sense to keep them from the wrong eyes. Thankfully, it's easy to secure them with a password.
Computing

How to change your Gmail password in just a few quick steps

Regularly updating your passwords is a good way to stay secure online, but each site and service has their own way of doing it. Here's a quick guide on how to change your Gmail password in a few short steps.
Product Review

Gate’s Smart Lock is locked and loaded but ultimately lacks important basics

In a world of video cameras and doorbells comes the Gate Smart Lock, a lock with a video camera embedded. It’s a great idea, but lacks some crucial functionality to make it a top-notch product.
Smart Home

Which is better, the original Echo or the Echo Dot? We compare them

Amazon Echo vs. Dot: Having Alexa answer your questions is nothing short of futuristic, but which device should you get? There are some big differences between the two, especially in size, sound, and cost.
Smart Home

Viral porch pirate videos freak people out, cause unrealistic concern

Viral porch pirate videos convince others crime is more prevalent than facts indicate. According to polls, even though FBI reports show property crime rates are at historic lows, more people worry about crime today than ever before.
Smart Home

Sony’s Aibo robot dog can now patrol your home for persons of interest

Sony released the all-new Aibo in the U.S. around nine months ago, and since then the robot dog has (hopefully) been melting owners' hearts with its cute looks and clever tricks. Now it has a new one up its sleeve.
Deals

Amazon slashes $77 off the iRobot Roomba 690 multisurface robot vacuum

This special offer comes just in time for you to get a head start on spring cleaning. The Roomba 690 robot vacuum sucks up dust, dirt and pet hair — all while you're away at the office.
Smart Home

Get sweaty with the best smart home fitness gadgets on the market

Are you looking for smart fitness devices that will really help your workouts, no matter where you like to exercise? These smart home gadgets are designed to help you analyze your workouts and keep track of how you are doing.
Smart Home

Our favorite coffee makers make flavorful cups of joe from the comforts of home

Whether you're looking for a simple coffee maker to get you through the morning or a high-end brewer that will impress your taste buds and your friends, you'll find some of the best coffee makers around on this list.
Cars

Vivint’s Car Guard keeps tabs on your vehicle when you’re not in it

A simple plug-in that you can place in just about any vehicle, Vivint's new Car Guard will automatically detect if your car is bumped, towed, or stolen and will alert you about it.
News

Fibaro smart devices are now compatible with the Samsung SmartThings hub

Samsung SmartThings now supports even more devices with the integration of Fibaro, a company known for its smart home sensors. Several Fibaro devices are already compatible, with more on the way.
Emerging Tech

Tombot is the hyper-realistic dog robot that puts Spot to shame

Forget Boston Dynamics’ Spot! When it comes to robot dogs, the folks behind a new Kickstarter campaign have plans to stake their claim as makers of man’s (and woman’s) newest best friend.