Wyze cameras let other people view her home: why cloud security is an oxymoron
VloĆŸit
- Äas pĆidĂĄn 27. 05. 2024
- đ / i_was_watched_by_someone
âą Cloud connected camera...
âą Arlo cameras take the ...
âą "innovation" is a dog ...
đ” frigate.video/
đ” immich.app/
âą Google reports custome...
đ www.nytimes.com/2022/08/21/te...
đ” We fix Macbooks & offer free estimates. rossmanngroup.com
đ” Send us your Macbook for repair! bit.ly/sendmacbook
đ” We'll send you a box with a pre-paid shipping label for your repair! bit.ly/sendyourmacbook
đ” We offer iPhone data recovery: bit.ly/2BDBX4G
đ” We offer lab hard drive data recovery: bit.ly/labdatarecovery
đ Matrix chat: matrix.to/#/#rossmannrepair-general:matrix.org
đ LEARN HOW TO DO THIS:
âș Beginner's guide: bit.ly/2k6uz84
âș Support forum: $29/mo boards.rossmanngroup.com
đ CHIPS & COMPONENTS:
âș bit.ly/2jaAOXM
đ TOOLS USED:
â Soldering Irons:
âș Louis' Hakko station(no tweezers): amzn.to/2cKkMyO
âș Paul's Hakko station(works with tweezers): amzn.to/2yMvWNy
âș Micro Soldering Pencil: amzn.to/2d5MWUP
âș Hot tweezers: amzn.to/2yMvZsZ
âș Atten ST-862D hot air station with bent nozzles: bit.ly/atten862
â CHEAP HAKKO ALTERNATIVES:
âș TS100 soldering iron: amzn.to/2Gy1Fqz
âș Recommended tips: TS-C4: amzn.to/33s3jpW TS-KU amzn.to/2QsKT36
â Preferred Soldering Tips
âș Fine: amzn.to/2d5MgPn
âș Flat: amzn.to/2JnsDBT
âș GPU wicking: amzn.to/2w8chtB
âș Micro soldering tip: amzn.to/2qUSFDh
â Microscopes:
âș Microscope: amzn.to/2iLrE16
âș Barlow lens: amzn.to/2yMKdKf
âș LED light: amzn.to/2nzfPT2
âș CHEAP alternative microscope: amzn.to/2rTlHbj
â Soldering/Repair Supplies:
âș Solder: amzn.to/2cKkxUp
âș Desoldering braid: bit.ly/2otflOX
âș Flux: bit.ly/amtechflux
âș Solder paste: bit.ly/amtechsolderpaste
âș THICK insulated jumper wire: amzn.to/2rvtD0A
âș THIN insulated jumper wire: amzn.to/2I47DQY
âș Kapton tape: amzn.to/2yN0xuq
âș Tweezers: amzn.to/2d5NBpi
âș Blades: amzn.to/2ByWnvF
âș Freeze Spray: amzn.to/2BySozw
âș Conformal coating: bit.ly/greencoate
âș Conformal coating curing pen: bit.ly/uvpen
â Diagnostic tools:
âș USB amp meter: bit.ly/2B2Lu5W
âș USB-C amp meter: bit.ly/usbcamp
âș On-Screen multimeter: amzn.to/2jtgY9K
âș Multimeter Probes: bit.ly/fineprobes
âș CHEAP multimeter: amzn.to/2zjkg8U
âș Bench PSU: CSI3005P bit.ly/benchsupply
âș Phoneboard: phoneboard.co
âș Boardview software: pldaniels.com/flexbv/
â Ultrasonic Cleaning:
âș ALL MACBOOKS & CELLPHONES: Crest P1200H-45: amzn.to/2ITSQdw
âș PRE-TOUCHBAR MACBOOKS & CELLPHONES: Crest P500H-45: amzn.to/2Qrnhf8
âș CELLPHONES ONLY: Crest P230H-45: amzn.to/2QsckKG
âș Branson EC cleaning fluid: amzn.to/2cKlBrp
â Desk supplies:
âș Desk: amzn.to/2yMShdZ
âș Chair: amzn.to/2LB8bUB
âș Fume Extractor: amzn.to/2d5MGoD
âș Work mat: amzn.to/2yMtlTR
âș Outlets: amzn.to/2yNsZwo
âș Gloves: amzn.to/2iUfumS
âș Durable lightning cable: amzn.to/2yNHzUt
âș Fine tipped snippers: amzn.to/2HGt4XB
â Screwdrivers:
âș iPhone bottom screw: amzn.to/2yNwX8p
âș Macbook bottom screw: amzn.to/2AKMdVb
âș Torx T3: amzn.to/2zjtxxH
âș Torx T5 amzn.to/2BLNDn4
âș Torx T6 amzn.to/2B0XIfA
âș Torx T8 amzn.to/2CpWp68
âș Phillips #0: amzn.to/2AJaHhM
âș Phillips #000: amzn.to/2yNqsCl
â RECORDING EQUIPMENT:
âș Work cam: amzn.to/2QjHnt0
âș Overhead cam: amzn.to/2eAH0oT
âș Work mic: amzn.to/2WGIhzw
âș Home mic: amzn.to/2xfampC
âș Microscope camera: amzn.to/2icVQoG - mine is DISCONTINUED, closest one I can find.
âș HDMI capture: amzn.to/2iyGcle
đ Affiliate:
âș Buying on eBay? Support us while you shop! www.rossmanngroup.com/ebay
âș Rossmann Repair Group Inc is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to amazon.com
đ Leave a tip for us via cryptocurrency if we've helped you out:
âș Credit card: bit.ly/postamessage
âș Bitcoin: 1EaEv8DBeFfg6fE6BimEmvEFbYLkhpcvhj
âș Bitcoin Cash: qzwtptwa8h0wjjawr5fsm0ku8kf40amgqgm6lx4jxh
âș Dash: XwQpZuvMvU44JT7C7Uh6xHvkSadzJw9fMN
âș Dogecoin: DKetsoCvwa2hF29ssgUA4Wz4hxT4kj3KLU
âș Ethereum: 0x6f6870feb48f08388ee345cf0261e2f03d2fa310
âș Ethereum classic: 0x671bfd61ba87edf6365c97cea33d66ba73645510
âș Litecoin: LWnbTTAjojZQt68ihFJFgQq3cYHUsTcyd7
âș Verge: DFumZ5sMhi3JktLQpsTVtV9xUt3zKDrcZV
âș Zcash: t1Ko3FkphQYoQroQc8k2DVk4WKMAbmNR8PH
âș Zcoin: a8QdvArHmdRYe1MjiqtP6jDNe6Z4JgnRKZ
It gets better. Wyse pulled the firmware that allows their cameras to connect to third party servers.
Now that's just scummy
They removed the RTSP? Thankful I got it earlier then. I have them linked to my synology surveillance station and home assistant so my wyze cameras are local
@@rossmanngroup Yep, there's openmiko and some other github projects that let you flash the firmware but it only works on the camera V2 that they had.. now they are on v3 probably just updated to break those projects from working.
@@KrispKiwi yea even those old ones require internet to boot up even with RTSP. That's why I flash them even though it breaks audio lol
typical bait and switch tactics that everyone does these days
Maybe Wyse meant crowd security instead of cloud security.
đ
Or *cloud* security as opposed to *normal* security.
They meant clown security. The security failure was the fault of their poor software testing! No Wyze components for me!
đ
Cloud *scrutiny* instead of security?
They tried REALLY hard to avoid saying "someone else was able to watch through your camera"
"Someone else got a thumbnail for your video and may have been able to view your content that was saved to our cloud services."
They clicked the thumbnail for the video and, well... ÂŻ\_(ă)_/ÂŻ ya know
Why use one syllable when you can use two?
Lawyers/PR doing damage control!
"Our systems detected that a person, who wasn't you, may have been able to use their visionary receptors, located in the eyeballs of a human being to see a thumbnail. This thumbnail of yours was clicked on, possibly using the index finger or thumb, which is located on the human hand which then transmitted colored pixels from their device to their eyeballs" - Wise PR Damage Control Team
Translation: "You gave us your data and strangers on the internet had access to your cameras"
@@tyler558806 Now you are thinking like a lawyer.
Cloud is a nice puffy term for someone else owns you.
Exactly charging you a monthly fee to gain access to your own property and your own files, its should be classified as extortion and theft, because it is.
If I ever have security cameras in/outside my house. I'm going to get something like a Sony A7x or something like that. Buck the cloud shit
@@rocketmunkey1tbf, if you're renting a house off of someone else. Is it really your own home? Home usually refers to the property that you bought.
@@GHOSTSTARSCREAM No I'm referring to YOUR files stored on cloud services, Your files edited on Adobe software. and using Your products that YOU BOUGHT and PAID Full price for, such as Your Camera, Your Computer, Your Phone Your Fridge ect ect ect
@@rocketmunkey1nobody is forcing you to use the cloud, extortion is a littler bit of an exaggeration
I love how this channel changed from how to fix your devices to how do your devices try to fuck you instead. Either way I'm here for it
It's all part of the "let's screw the customers" mentality.
As someone who does tech support for a living I would never have an Amazon ring attached to my house.
Yeah. If I were to pick up any cameras to be used locally, they would definitely still need some configuration and adherence to best security practices too. Just because you take something off of the cloud doesn't mean it's automatically secure.
....or any recording device through the Internet.
My mother has one in her Chicken Coop. That is about the limit for me.
Setup a local server for camera then
Agreed
Yeah but Louis. How else would random people see you naked in your home without spyware security cameras?
I sure wouldn't wanna give that up đ
Somebody wants to see me naked? That's stupid, perhaps even sick...
Aha the good old days where u surfed google for open camerasđ
@@andreitkach3873Yes, I was watching a random street in New York all the way back in 1998, believe it or not. Very grainy, 1-2 frames per second, but there we are.
@@andreitkach3873 I remember doing that. One time I got into a motorized security camera.
When I moved the camera, it moved back shortly afterward, until someone started to fight me for control of the camera. I like to think that a security guard somewhere had a very confusing few minites where one of his cameras was randomly moving about.
People used to laugh at me holding my own infrastructure. I always warn my friends that if you can't control something it;s being controlled by someone else.
"Big brother is watching you. ". It was proposed in 1948, It was argued about in "1984". And it is unkown today, where we actually live in The book.
Completely true!
And it gets deleted from your e-book reader even if you paid for it in full.
Louis, I'd like you see some actual showcases of open source softwares you use with explanations for why you use them and how you use them.
I think getting a glimpse into someones actual setup could help a lot of people feel less insecure about trying to implement things they understand nothing about. I imagine self-hosting anything is a scary prospect to most people who aren't used to it, so I'd like to see the barrier to entry be lowered further.
Yeah there are a lot of options out in the world. Having a trusted source as a starting point could help many people get into the hobby of self hosting everything.
Guide for a local camera system that uses laptop cameras you can buy used for $5 czcams.com/video/CouxmNqxO4A/video.html
My gf's friend had wyse cameras to watch her cats while she was away. Gf wanted one too to keep an eye on our cat. I disuaded her by saying "Every time you turn one of these on, just imagine a weirdo on another end looking into our bedroom". Glad I managed to talk her out of it that way. I promised that when I have money and time, I'll setup a home server to run these locally.
I self-host everything, from my cloud storage to my cooking recipe collection and everything in between. It all started with a news article I read 10 years ago where Dropbox couldn't give a straight answer to whether their staff had access to customer data, followed by a sneaky, quiet change to the user agreement's terms and conditions.
You can always encrypt files before uploading them.
â@@CommanderRiker0great idea, always waste ur own time to encrypt stuff before saving it in cloud, ofc it works this way, and then to also decrypt it back when downloaded đ
@anov2737 Encryption on modern PC's in the GB/s (or min). Its literally just seconds. Much faster than creating and maintaining your own hardware. Also, most cloud providers are hitting 5 9's of reliability 99.999%.
@@alexivanov2737 Syncthing has a feature that automates this for untrusted remote storage, but I don't think it will work for making a copy in local storage. Perhaps there is a hack or another software that copies your data in encrypted form to your google drive folder.
â@@CommanderRiker0you still Pax for IT though.... And i guess seconds also depends on the size of data you have. Furthermore why do i have to buy modern Hardware just becouse some Business are utterly garbage?
No innovation... all they're doing is inventing different "services" for old equipment to bury the full shaft. You nailed it brother.
People forget, the "Cloud" was used in network diagrams to indicate unknown connections and usually had a question mark in it. We called it "Cloud Cuckoo Land". That said I have a friend that was having trouble with the frame rate while we were playing a game, he did not understand why as he had high speed internet. After a round of twenty questions I found out he had 27 active devices on his router and another 57 that were attached but not active. I have 2. Nobody needs to have that many things available from the cloud.
Wtf? What was he using all that for? At most a tv (shouldnt but oh well), phone, tablet, laptop and computer. Perhaps multiple of some, but approaching 80 devices đ«
@@vincentcarl9907 security cameras, and smart light bulbs for two that I remember.
As someone who worked for a security system integrator, I can tell you that not a single business we installed for opted for any kind of cloud based recording system. It was all local NVRs, all the time. Turns out, cloud based systems are very well known in the industry for having some pretty extreme security vulnerabilities.
There was a story in our paper the other day about how Omega, the Swiss watch company, used to sell spare parts to independent repair shops but now is withdrawing the service. It's all because watch owners can get a better service if they go only to registered dealers! Right? It reminds me of something...
Wait what? Oh no, say it isn't so. I happen to own an Omega Seamaster 300m, that I have to get fixed at some point. So now I'll be forced to pay the $600+ servicing price tag that Omega charges their customers? F***
I bet some of those parts were being used on fakes to make them easier to pass off as the real deal.
@ch74If you want to look wealthy then cough up! Think of it like a status subscription -- keep paying and you will maintain the same level of face value respect from strangers. Or, economise and have to justify your existence slightly more.
@Philip_Taylor "If you want to look wealthy, give more money to rich people".
Yeah, sure mate.
â@@kingzach74sell the watch and buy from a brand that has some respect for your intelligence.
Obviously not defending them in anyway, but I do have to admit it is refreshing how transparent they were about the breach, down to the number of people affected
It is sad that this sort of thing is worthy of praise.
It means they have quite a bit of logging in place.
I experienced a breach on my home network a couple of years ago: and have yet to figure out how much data they accesed; or even which machines were compromised. IP addresses changed, but the router had rotated the log already.
they are probably legally obligated to do so because if it leaked from inside that it happened and nothing was said it would be far worse
That is because they got tons of hate because of the first screw up they had when they ignored security vulnerabilities for about 3 years even after it was brought to their attention.
@@MernomSo youâd rather them never disclose such an incident and those affected?
Weird thought processâŠ
i never really thought how ironic the term "cloud security" is
vaporous
Very similar to "military intelligence".
"Cloud security" (or lack of it) is not the issue here - the Cloud is simply "another computer to run things on".
What *IS* the issue here is not understanding the difference between "security" and "privacy", and building a threat model that identifies when and how a particular system puts both of those at risk.
â@@velisvideos6208đ
The oldest saying about the cloud is that the 'S' in IOT stands for security.
I remember I used to think when you have security cameras installed in your own home, you would basically be spied on 24/7 by whoever is on the other end. Great to know that in 2024, that literally is what all devices have become or are becoming.
I used to think my mother was going crazy when she covered her laptop camera with tape, 15 years ago. But no, not only was she right, she was smart to do so.
They have sliding covers on them now, like this one here, for that very reason.
@@Philip_Taylor She was crazy then because at-least 15 years ago we were just starting to lose our freedoms and it made no sense.
No Karen, nobody is watching you.
Today its a different story.
@Philip_Taylor There is a picture from like 2011 of Zuckerberg sitting at his laptop with tape covering the camera and a broken microphone Jack with no microphone attached in a port, so itâs impossible for it, or any hidden device to pick up sound.
@cttommy73 I remember when the biggest and most famous movies were like âenemy of the stateâ and âminority reportâ. And dozens of TV shows warning about this very thing to help inform the dense among us. Then millions of people who watched and understood those movies go buy Amazon echoes years later. There is just no saving some people.
"Cloud" means "you don't buy it once and own it, you rent it for as long as you are made to depend entirely on it".
Sort of like property taxes.
@@ohsweetmystery Only thing you really own today is your body. Everything else, including home, car, computer, phone etc is only on paper that says it's yours. Anger a government and they will give you another piece of paper that says those things are no longer yours.
It may take 90 seconds for some people to do a search and implement something. There is however, a slice of population (dare I say a very big slice) which could NEVER do it. These are not easy things for the common user to do or switch. VPN on a home router? Image instead of Google photos? It is just not happening.
Not that there are no resources to help. I know because I recently embarked on an initiative towards better privacy and it is overwhelming. I dropped one of my usual enjoyable hobbies in lieue of better educating myself and man, it is a black-rabbit-hole of a grave I have dug myself into. It is depressing at best. The more I read and watch, the more paranoid I become. Changing email providers, using VPN's, finding alternative secure storage, changing smartphone OS and physical devices, to then find out that even your new choice(s) have flaws and it is back to the drawing board.
This is exhausting.
Thank you as always.
As a tech support I sometimes wonder how some people operate in day to day life. "How do I set signature in Outlook" used to be common question. I don't know, maybe write the exactly same sentence in the small field on Google and click on the first link it finds? Or call the internal IT helpdesk to ask if we know if a car dealer in their city will be open on the next day (I think there were local floods from extreme rain on that day or something like that, it is about 5 years ago). "How do I change a ringtone on iPhone?"
I think that running a business where we would set those things for homes/small businesses would be pretty cool. Do you have a small business with one or two employees and you need to set a server, firewall, VPN, camera in the shop, some data backup,...? No problem. Or if you run a restaurant and you want to set network for employees, another for customers and one for cameras.
The likely way to do this will be some kind of "data co-ops". You trust one person or group in your community to know what they're doing.
I'm in the same boat... I feel like I'm juuust tech-savvy enough to understand how terribly wrong is the overall direction these tech companies are taking, but nowhere near knowledgeable to actually start implementing countermeasures against the dissolution of my privacy.
I still think it's worth it, otherwise I wouldn't be sinking deeper in the rabbit hole, but boy it's overwhelming...
@@thewhitefalcon8539 That is partly why I believe that computer education should be much more taught in schools. I don't think that every kid should learn how to program in Python or C# in high school, but at least have a look inside, just to see that it is not "black magic" but a string of instructions. Learn what is the difference between close-source and open-source. Maybe even something as crazy as replacing a chip on a motherboard. Setting a home router.
When I think about it, maybe teaching a programing language in school wouldn't be a bad idea.
I'm a software dev. He is absolutely trivializing how much money, effort, and time it takes to set up a secure home network, not to mention the ongoing maintenance. I don't want to spend hours and hours of my free time just for the peace of mind that someone isn't peeking at the activities on my front lawn.
I do agree that there are tradeoffs for privacy, and
I don't love that there are surveillance devices everywhere in my home waiting to be compromised, but exactly the world we're living in.
I remember 4chan threads many years ago where people were hunting for unsecured security cameras creating huge lists of everything from offices to bedrooms.
Scared me off for good from installing any kind of camera inside of my home.
It's safe if you know what you're doing. Cameras should NOT have have internet access (stick them on a separate VLAN that's blocked from the internet at the router's firewall). The recording software you use (Blue Iris, Frigate, etc) should not be exposed publicly either. If you need to access the cameras when away from home, use a VPN like Tailscale.
Those where wild times some of the shit I saw while searching random ips
Good old-fashioned closed circuit television is the way to go. You can then have total control of the data. This is why CCTV installation companies still exist and can charge a decent amount for their services. The alternative is cuckholdry.
â@@liljasereYep, was the same in the days of analog mobile phones. Anyone with access to a decent scanner could skip between people's calls at random. Used to hear some funny stuff.
âSometimes even that is too risky. At work we got firewalls, vpn, vlans, etc, which causes issues but they're "acceptable losses", and most importantly, absolutely no VPN route for external access and codified at P-level, "camera access implies being physically there".
"I the manager of everything request cloud access to view from home", legal will tell they told IT to make thar physically impossible and for you to go pound sand.
No one can be trusted but localhost.
Here in the UK I think they are called Public information films. In the US I think it's Public service announcements. Louis videos should be part of the Public service announcements.
They should pass a global law stating if the product is not supported anymore, it should be open source and been use with like camera onvif standard, light switches with own software or if user want with other software like ex:smart life, etc... Not get brick lile kasa eula state
As a person who would _never_ connect my security cameras to the internet, I'm also going to be a realist here. There are some people, even with step-by-step instructions, who will never be able to configure their own security system. Making sure they pick the right hardware and follow the steps correctly is just outside of their skillset.
Assuming the lady here falls in that category (which is likely), it's completely valid for her to use a third-party service to monitor her pets over a camera when away from home. That said, I can't fathom why she'd _ever_ have those cameras on when she's in the house. Those would be hooked up to a power switch, and the moment I walked in the door every evening they be off until the moment I was walking out the door the next morning.
Yep. Anyone who has worked in IT support knows exactly that certain people are incapable of following a super simple, step-by-step guide. I learned that rather quickly working in a help desk during distance learning at a school district. You can tell them, click the blue "Yes" button and they'll click the red "No" button and wonder why it doesn't work.
This same sort of incident also happened with Ubiquiti Networks, although at a much smaller scale compared to Wyze. The Ubiquiti incident allowed people running UniFi Consoles with Protect, Access, and Network, to access someone else's console. It was a caching issue out on AWS (I believe that is what you use). Ubiquiti does localized recording to an UVR, but the leak happened from their cloud connection broker.
Yup. I tried with "cloud/remote access" off for a bit after that, but I share access with my spouse and parent and they wouldn't be able to handle a vpn. So I only have outdoor cams on 24/7 and indoors is plugged in only when we leave the house.
My friend had taken some pics of her granddaughter playing in the bath tub and in a baby pool. She took a USB w/the pics (and others) to Walmart and they refused to process them into photos as they were "child pron"... đź
â€Thanks Louisâ€
I have a few and they're only allowed to be outside. Idrc if someone else views them tbh. Go ahead, watch my trees blow. I'd never have them in my house though.
Never sunbath or let animals out there, some creepers creep on anything and everything!
ââ@@paulct91They can look at my 6 pack when I mow the lawn if they want đ€·đ»ââïž. Really don't care, lol. They're so grainy you can't really make out who it is anyways.
Thiefs can watch your outside camera feed and they will know when some one is in home or not. Then rob you in most "convinient" time for *them*
Hey Louis! Thanks for the video (even though I doubt I'll be needing my own security system soon).
I just wanted to come on and say that I took my laptop to an independent repair shop to get fixed. I was only able to go to a smaller shop after being a new subscriber of yours and gaining confidence in the repair tech industry through your videoes.
And guess what? I had a 10/10 experience.It cost be $80 in total vs the $120 other, bigger stores (like Best Buy- where I bought it from) were quoting me. The guy was nice, the repair was quick, and I wasn't talked down to when he walked me through his screen repair process (which, happens a lot to me as a woman looking into "tech things"). I made sure to leave a good review btw.
I was honestly would've hesitated to do so in the past because of my general trust of manufactures over all else,but this has been a good experience.
Thank you Louis!
I'm happy you found a good place that treated you well. Not every independent is great. There's always going to be some bad apples. But there are a lot of people who care, and you found one. That's great that you left them a good review as well. I'm sure they appreciate that a lot.
We need a "Local computing/storage or die" T-shirt.
If Louis makes one I'll buy it
@@jer1776 Seconded
This happens time and time again, sadly - and not only with security cameras, but with every damn device that has a camera and is connected to the cloud. With 3D printers, this was an issue with Creality as well as Bambu Labs. Printers of both companies showed the camera feed of another users printer when you tried to connect to yours.
Edit: Wow, just today, another HUGE security vulnerability in the 3d printing space came to light. You can access ANY internet connected anyubic printer remotely because they somehow used a flawed MQTT implementation. Someone did send out a message to roughly 300k printers with that lmao, thankfully just warning users. According to him, he could've remotely wiped the firmware of every printer.
And of course, both incidents were quickly dismissed and forgotten within weeks. These companies never ever face negative repercussions.
I remember. All this cloud shit is horrible.
Thankfully we always have Octoprint
Wiping the firmware would be benign and even helpful since that was the problematic part to begin with. You could potentially get a printer to ignore the limit switches and repeatedly crash into the pillars until the printer physically destroys itself.
ââ@@-eMpTy- BambuLab is a startup and they fixed it quickly. Now their printers support LAN-only mode so you don't have to trust them.
I know you often say that youâre not a IT security expert. I am, and I know a lot of people in this field. It sounds like your setup is way more secure than what most of my colleges have. Thank you for spreading great security practices.
A tutorial on doing this setup would be pretty cool!
being familiar with all these topics I often take it for granted that people don't really know the options they have, nothing makes me more sad than to see people think they're getting a better deal with cloud stuff.
fuxk other clouds, be your own cloud!
Thanks for spreading the word Louis :)
How many people pitching other products, and how do we know there isn't some hidden interest in there somewhere?
This is good information, don't get me wrong, but I'd still like to see some tutorials somewhere.
But he has the money, or the time to dig into every single subject that they need to learn.
We only have so much time in life, and we're going to waste it on what?
Its called the cloud as its as transparent as one and just as strong for security as one
I recently ditched all my Wyze cams for Amcrest and Reolink POE cameras. They are not susceptible to WiFi jamming because theyâre POE. If you rip them off the wall, the footage is still stored in a locked server rack inside a locked closet. They do not have access to the internet or even other devices on the network thanks to firewall rules. They are only allowed to talk to the NVR pc and an NTP server for time syncing. The NVR PC is not allowed to talk to the internet either except for very short periods when I manually pause that specific firewall rule to check for updates, So unless youâre a nation state or 3 letter agency, youâre not going to view my cats when Iâm not home đ. All in all, Iâm so glad I went with a DIY solution that I built myself that is 10x more secure. And the fun part was I learned so many new things, like how to make my own Ethernet cables, what ONVIF and RTSP are, how to create an NVR, etc.
Do you watch your cats from outside the home on your smartphone? If so, is it open source software secured by encryption you control the keys for? If it is not software or hardware you control, it's still not safe.
While I agree with you in principle, some data you do want in the cloud, such as some camera data. If everything is on-premises, that can be taken by an irl thief. And not everyone has the time to admin a ton of free but powerful applications. I can barely get my family to understand our NAS let alone connecting to a VPN to review customized camera data.
I work as IT technician for MSP, and I work with Microsoft services a lot nowdays.
One person cannot imagine how much data access Microsoft have, and they still try to push users from using on premises servers to cloud, to get even more access to data.
One disgruntled employee at Microsoft or one "package" they decide to use in their environment and your business is done for...
Yeah, Microsoft has gotten really annoying.
Word for example no longer has local autosave. To use autosave you must use onedrive... Ie. Ni autosave unless Microsoft has direct access to your document.
My parents don't care that their two cameras are sending ALL their data to China directly as per their TOS (which also said they are not liable for ANYTHING and any court stuffs had to be dealt in China only) Everytime i go there i feel like i have no privacy, and i almost got into an argument with them and they flat out told me they didn't care and it "does the job just fine as-is".
Wild how much people hate reading TOS and do anything slighly inconvenient...
Thanks for posting links in your videos, makes it easier for me, always appreciated!
I haven't had a convo yet with my family but these devices are out of control
Louis. You rant.
I like that.
Your frustrations resonate with me.
Keep it up please.
I bought one of these cams open box at Micro Center for $12 to look over my apartment complex parking lot. Even though I use an SD card, you can't access the video stored on it without streaming it through their servers. For such little money and no subscription fees I'm pretty happy with the setup. It successfully aided in busting the bad driver who was bashing up everyone's cars. I definitely wouldn't want it inside my living space though. I can confirm that I was able to see random people's thumbnails that morning. I look forward to the inevitable class action lawsuit. Maybe I'll get my $12 back.
Yes, you can actually view what's on the SD card. All you have to do is take the card out of the camera, and connect some sort of SD card reader to your computer. Then, just fire up your copy of vlc, and view away ! :)
Well, perhaps I would be joining a different lawsuit, the one that deals with Wyze updating firmware, and killing cameras, just so that people have to buy new ones !
@@kumbah2006 interesting. I guess I always just assumed it was encrypted.
WOOW this is crazy!!!! Ive never ever trusted any cloud wifi whatever camera
I hate Cloud based systems, moved everything out of the cloud 7 years ago now from email, storage, websites and never looked back. Also noticed since moving away from these Cloud based services i.e email I no longer get cold callers neither SPAM.
I certainly learnt something today. I've needed to get some cameras for a secondary property to monitor comings and goings for quite a while, but I've never trusted any of the camera companies that required a stupid ass subscription service to access basic features that I know I could get for free elsewhere. Thank you Louis for pointing me in the right direction to start to get my own setup going without having to interact with these stupid companies who would absolutely steal my data and charge me an arm and a leg for basic features.
If your video storage never leaves your home, that means if someone takes your NVR locally, you lose everything, including evidence.
And you will not likely get a push notification if you running everything at home. So you are not likely to save a remote clip when such happens. Off-site storage is very important, whether it's a cloud or something else.
ask a friend if they would let you set up a backup server at their place in exchange for letting them set up a backup server at your place?
@@MrDoboz That is a good solution but itâs similar to cloud: someone else computer. The key part is always trust problems. Most cloud is not designed for safety(honestly big tech usually better than novel companies since itâs always have lots of eye on them). Personally I will set up cloud backup based on event triggered clip and host on AWS S3 with additional a public key encryption(pgp). But that is not for everyone, thatâs for âdragonâ. The point is still Itâs better to have cloud or something else as offsite backup.
In my experience, most people don't care about it until it happens to them.
Telling them before hand will get an 'I don't care response'.
An 'I told you so' afterward will get you the evil eye.
I generally ignore it all these days and let them make their own mistakes.
My immediate thought was caching, and I was right! It is difficult to both maintain a common cache as well as do access security checks. But the problem is of their own making.
Absolutely. 10 years ago I had 6 Foscam cameras that spit out a standard IP video signal. Came with software that allowed me to record them on a PC on the network. Getting them to work through the Internet was a chore - opening ports on the router and subscribing to a dynamic dns service (DynDNS) in case my ISP changed my IP address. And installing a generic IP camera app on my phone. But it worked. For $40/year for the DNS service if I wanted to make finding my home IP address easy. Now you have to SUBSCRIBE to a service and basically MARRY THEM unless you want to change every camera in your house when you change the service. They got you by the balls. And you simply CAN'T use the standard IP video method.
I have a TpLink Tapo camera in a public area, but I only bought it because it was cheap and allows you to access the stream over a local network and I record it to a computer/ DVR. Only thing you can't do without the app is use the movement functions, so I do use it for that. However if it was in a private area I would block its access to the internet. Don't how safe I should feel. Haha
The problem is at 3:30 or so: a third-party library. I work in software development, which is really code for "glue a bunch of third party libraries and services together and hope it works." Why? So companies can pass the buck onto someone else. "Well, it wasn't OUR code that was the problem, it was our partner or a third party library to blame." Software companies don't write code anymore, they just write glue logic and tie these libraries and services together. There's a great article on this called "NPM & left-pad: Have We Forgotten How to Program" that goes over how an 11 line method to add spaces on the left side of a string caused lots of big name companies problems. It's a hilarious read and details the exact problem.
ahh "the guy that took down the internet" also something like that. I watched one video about it
Lol JS ecosystem is a joke. 25% of the top *downloaded* packages are deprecated. There are packages entire libraries dedicated to 'isNumber' and 'isEven'
Maybe that is why everyone is afraid of AI. They aren't even programming lmao!
I'm not 100% sure on how Wyze develops their products, but I'm assuming they do a lot of their coding in-house.
With that said, I'm not an expert on their systems, but I think they do a lot of it themselves
If I'm wrong, maybe I should take some time out to write them an email, and ask them how they code their products.đ
I thought they did their own software, and everything is done within their company.
Maybe that's something I ought to do?
@@kumbah2006Literally nobody in this industry writes their own complete platform from scratch. It's all built on top of existing frameworks and libraries, which are built on other libraries, and so on. It's good, because nobody reinvents the wheel like this, and instead use open source, vetted libraries. The problem is when the developers of the platforms get lazy and don't properly research or follow the development of the libraries they have in their platform. Even when they say "everything is written in-house", the actual codebase will be 80%+ open source libraries.
This is the problem Louis. Back in the day we use to do things ourselves. There was no cloud. Wanted a server. Ok - you have to set it up. Want to make a web page - ok - learn HTML, CSS, PHP< etc. Now with cloud just about everything is a plug and play solution. People rather have that than using their own hands and mind to build something when they can just pay somebody else too. Thing is - not only do you pay financially for this, you are also paying through not knowing how to do things, and paying with your data and privacy.
A "security camera" that sends the feed to someone else's server using a public network is no "security" đ
Something like monaserver, vlc, and a webcam setup on an internal LAN connected Wifi (not connected to internet) can all be achieved for free aside from the hardware... and is actually YOUR data and direct access. You can even turn your phone into a webcam using certain apps and acess everything if you understand the additional setup.
You've inspired me. I'm more than capable of running my own systems. I've just gone through and deleted 13k google photos.
I have had Wyze cameras for many years now. I bought them because they were inexpensive (like $20) and I had no cameras at all before. They have had security issues multiple times now. I lost confidence in Wyze 3 security issues ago. Yes, this has happened atleast twice before! I only use them outside.There needs to be class action lawsuit against Wyze. I can not afford to buy expensive cameras.
And it gets worse. It was once advertised on the box that you get person detection for free. That is no longer the case. It is now a pay service.
Define expensive .. I buy plenty of current generation Axis stuff on ebay secondhand.
Just pay attention and set alerts.
I bought Wyze cameras because they had the option to use an SD card to store locally. I never allowed the content to upload to the cloud. A few years ago they made the local storage part of the app work terribly. It doesn't store video anymore. Just pictures when it detects motion. I hate the cameras so much now.
How? I still have the WyzeCam V1 and it's recording on the SD card fine. I never subscribe to any subscription service ever.
@@SteelTumbleweed Must be user error on my part. I have V2 and V3 cameras. All that happens on my app when motion is detected is it takes a picture. There's no video.
@@Delineated69 Those thumbnails show up as part of the Events tab for me and also show up in my notifications. Tapping on the event thumbnail brings you to a fullscreen view of that thumbnail. By tapping on the fullscreen view I get an ad for the cloud subscription. There's also a button on the bottom of the thumbnail fullscreen view page called Playback that takes me to my video recordings, but it does not start playback at the event time. I have to scrub to it manually.
I'm not sure where these thumbnails are stored as I'm pretty sure I would get them even without an SD card installed. Are they on the cloud even though I have no cloud service? I didn't pull out my SD card to check but it's scary to think about.
I wish everyone in America would watch this video. These companies are putting more and more on the cloud that doesn't need to be there, and they get away with it because the average person doesn't understand the difference between the cloud and a device in their own house. It's invisible to them. It's magic.
This video was educational and explained the situation well.
im not a tech savy guy alot of the tech talk goes over my head but i love these reviews man
I bought a few cameras many years ago, never hooked them up until now. Glad i kept them, they're PoE, have rtsp, sadly their built in person recognition broke due to requiring flash. But i set up frigate with the rtsp streams and have detection again! No cloud crap on them though.
At least they had the decency to let people know about it instead of pretending the incident never happened.
Surprising honestly.
Nope.
@@gsftom Then who did the email come from letting the person Louis showed know her account had been affected?
Her mother's horse?
I got a similar email, and thank heavens I did not have that problem. My account was not affected. :)
It's fun hearing smart people using complicated words. I understand 0 of the techy stuff you said but I understood the message. Good job!
I still remember when the first Laptops came out with "webcams" and MY very first response upon getting one from work was to go into the First Aid Cabinet and get one of those little round "Dot" band aids and sticking it over the camera and the hilarity and harassment that ensued from my coworkers...
The worst part is that Wyze knew about this security flaw for 3+ years now and have done absolutely NOTHING to address it
Ive tried preaching this exact thing for the last few years, seeing how big companies' missmanage and abuse our own data. Kudos for informing many more about this and i hope more people take this advice
My cloud lives in my closet. Since I know my friends and family won't do their own, I've invited them to share. If they need access to their stuff, they have a physical location and a trusted person to come get it from.
VPN - Wireguard â
Self hosting storage - Nextcloud â
Some things may be a 90sec search, but the more you want to untangle from the cloud the harder it becomes unfortunately :/
Sounds like a good topic for a series of informational/ tutorial vids, DIY security cams and how to keep it all local
a lot of people may not know the best ways to implement a custom made system
It sounds like a good idea.
I just bought a Wyze camera bc it costs $20. I use it as a dummy camera that is not powered or connected to anything. No way I would ever connect a cloud camera at my house, business, etc. I worked in IT for many years. IT or any company that hosts your data can and does read, see, watch any system and they will see anything u record, say, etc. It doesnât require a security breach. Itâs not an if/when question. It is something that is accessed anytime, any day if anyone cares to.
Cloud = everyone can and does see u and everything u say or do anytime they want to. Sucks, but thatâs the truth.
I get a little kick of dopamine every time I watch a Louis Rossmann video
7:58 - Who owns that ML algo? And where is that data stored?
It runs locally and never touches the internet, ever. The way AI should be. That's the beauty of it. Check out links in video description.
@@rossmanngroup Excellent!
Will check it out! Thanks!
Immich is fucking awesome. Highly recommend!
The ml algo is a combination on OpenCV and Tensorflow. You run it locally either on cpu (bad idea) or on a google coral tpu.
So the models are open, run locally, and you can airgap the system if you so choose. Its actually perfect
@@joshua7551 Niiice!! Thanks for a more technical explanation/input!
Where has Louis been all my life?! I work in IT and in 2024 have not connected cameras at my house due to the cloud being a fancy name for someone else's computer. Haven't needed to and probably won't but it's peace of mind. Personally I don't have much time for IT nonsense when I get home apart from setting up a FreeNAS and using an e/OS/ Fairphone I refuse to pay for cloud services that people have connected to their uyghur slave shop phablet devices.
I go crazy telling people top using Google, AWS, Facebook etc. You ARE the PRODUCT!
Agree with all the points made however this trend started with Apple to reach the masses of non tech-savvy consumers. Not everyone has time to setup their own security camera system, home server with all the bells and jingles. I know I don't half the time.
Its amazing how much you can learn and do on your own. Just remember to pace yourself in the beginning. No need to cram all of human knowledge in a night.
Making awareness on these issues is appreciated!
Ooof...
Shoutout for Night Owl security systems.
I used to install these pre-CV19, and I'm happy to check and see they are still local security systems that you can VPN/IP connect to remotely.
I want a step by step guide on setting up a camera system that isn't on the internet, holy shit that sounds amazing.
So true. The effort for most people is a great barrier. They don't know it or understand it so they just follow what's easy.
The one caveat to self-hosting/configuring is time outside of the quick vpn setup. It can take a decent amount of trial and error to get a lot of these systems setup the way you want. I've been trying to make my way through getting home assistant going along with a couple DIY projects but I just haven't had the time to dedicate to them like I want.
Seeing that there are cameras and NVRs that are OSS compatible makes me want to jump into them more when I can though. I always love coming to this channel and hearing about alternatives.
Until recently I worked in a pro CCTV design company. EU EMC standards cannot be met by wireless cameras, it is potentially illegal in my opinion to have a wireless camera tested against a basic consumer standard and then be called/marketed as a "security camera". EU has a specific EMC immunity standard (EN50130-4) for security cameras and all the consumer ones I have checked do not declare this on their EU DoC. If the camera's wifi connection can be brought down by a nearby mobile phone in a call, how can that be security? There is no exemption for consumer security, they would need to be declared as "monitoring" or "viewport" and not security.
I feel like you deserve an achievement for being the one channel I couldn't watch on 2x.
Great vid, as always. Your int, personality & passion about these things is pretty awesome to see. Keep on keeping on, man.
Thank you for the work that you do, Louis. DIY-ing is my new way to de-stress and learn at the same time. Will definitely check out frigate and immich soon. Cheers!
Have you seen the Wendy's surge pricing? Another new level of scumbaggery, now in fast food. Keep up the great work Louis
Eat real food...
@@RealMTBAddictAbsolutely. I don't eat there, but a lot of people do.
I love the Burger King xtra long chili cheese.
Menu was 7.99 for like 5 years, then it jumped to 8.99 and half a year later it now costs 10.99 đ
My husband showed me this. It's so dystopian. I said "well then we just won't ever go to Wendy's again, we aren't missing anything"
There's so many choices out there when eating out should really only be a once-in-awhile thing anyway.
I cook every night, except nights that have me swamped with work, or it's a bit of an emergency, like last night, our fridge went out on us. So my husband and I ate at Slim Chickens (it was surprisingly really good). And we bought a new fridge because we're not about that fast food/eating out life đ
Wendyâs has walked that back. It prefers the term âdynamic pricingâ and claims that it doesnât mean increasing the price at high-traffic times.
"This cat is a person"
Accurate. Cats are people!
Cats aren't people, they OWN people. đ€Ł They have staff.
@@youtubasoarus Cats have possessions not staff
Any network you can't control is automatically suspicious. Yes it's useful but at the same time, doing stuff on day Starbuck or McDonald's so open it's not funny. Same thing with cloud stuff.
My last place I worked at had an issue where a 3rd party backup group (we don't do backups, that's all on the client and their IT) but many ppl this was their only backup. (For backups, especially for businesses, more backups are your friends) but the cloud backup got hacked and a ransomware was inserted to the server... And then went upstream to their clients. Had some we couldn't fix it because their only backup was DOA. Others did have a secondary backup, so it was easy to wipe the drive and reinstall everything.
Hey brother. Love your videos. The way you speak just has a way that shows that you are a genuine person. I have been watching your videos lately and I really love them. Thanks for doing all of this on behalf of us.
I'm 31 years old. Every piece of tech I've ever used is secondhand. I either know how to fix my stuff or know people who know how to fix my stuff.
In my experience the easiest way to know you're safe is offline. As long as you're offline, your tech will never be compromised. Exclusively online services that constantly require updates and internet connection are a security risk.
And hackers get a bad rep. Hackers are too rarely going out of their way to specifically target you. It is the companies that are making you an easy target with their products.
so glad you spoke on this âŠ
it amazes me that people are so readily willing to toss aside security and privacy for convenience âŠ
Great video Louis.. agree 100%. Another approach if you don't want to setup a VPN.. Put 2 NICs in your camera server... put all your cameras on one and don't give it an internet gateway to get out. This keeps your extremely sus Chinese camera from phoning home and sharing a stream out anywhere. Then connect the other NIC to your LAN and open a port on your firewall to expose the NVR web server so you can access it remotely.. just use a good router with IPS/IDS, and monitor your camera server for scanners and hackers and block them. You can also block IPs based on geolocation so - block the whole world except USA, etc. And yeah just don't put cameras inside the house and expose them in any way. Use a VPN for any indoor cams for sure.
Thank you for clarifying these basic network privacy mistakes by end users. I thought self hosting was an obvious benefit to keeping my data safe, but as it turns out, most people think otherwise
I interviewed with Wyze a few years ago for a job. I asked if they had considered doing local storage, as everything goes straight to the cloud, they said no.
They also had you make a 30 minute presentation about what you've worked on in the past, and during my presentation some of the interviewees started watching something on his phone with the sound accidentally on. (I did not get the job)
They sound like rude asshats.
Well, they have local storage now on some of the cameras, mainly in the form of an SD card.
So sorry to hear that you didn't get the job. :(
I high school I found several security camera hosting sites that literally didn't even have a sign in page. One of them had a fire on a boat in the middle of a marina.
Many were in peoples' homes.
When I received the email, just thought "Oh, wonderful". While they stated mine weren't affected, downplaying or not, least mine showed nothing sensitive, maybe aside from my license plate.
Unfortunately this is a skill issue on the consumer's part. But you're absolutely right, learning is fun. Gaining a little control over the tech you use is a great feeling. Security is not a product, but a process. Bruce Schneier
I can put your video on and just zone out Louis. Knowing that the spirit of justice and consumer equality is playing in the background. Continue to tell the truth.
watched this video last night and then had a nightmare where I had a security camera in my bedroom and then got pictures sent to my phone from someone I didn't know of me in real time. scariest nightmare I have had in years, not using cloud for important, safety-requiring things ever again
Iâm shocked, I am shocked. You give up your personal security
Are you really that shocked? lol
I agree with you Louis. Blessings to you for what you do! Thank You
"Lol, it's not our fault, it was AWS and a third party library, but we fixed it so it's all great so it's not our fault".
I like unifi. Nice balance. Always stored locally, option to view through their cloud proxy. Or you can disable that and enable openVPN so you just VPN into your local network from anywhere to view your cameras. Only downside is you need to buy their cameras to use their recorder and have the flexibility of cloud and/or vpn.
It sounds like a case of denial on your part. From where I am standing, you're still locked into their products.
@@terrydaktyllus1320 I realize that. Mentioned it at the end of the comment. The focus was it providing the range of security that someone would want with the simplicity of the ring/wyze systems.
@@sliphere011 It's "security" at the expense of "privacy" - to me that's not a solution by any definition.
@@terrydaktyllus1320 they give you the option to disable all cloud functions and just use VPN to connect to your local drive. My point was you have options with varying privacy
Yeah, I'm also on Unifi. Yes I can use a vpn. But I also grant access to my spouse and parent. They wouldn't be able to do vpn reliably. Or I'd be on the hook hand holding them constantly.
Steve O has really changed over the years
I love your channel been a viewer since like 2012 2014 I think. Honesty learn a ton from the conversation you have give insight on things I had no clue about and I apply it to everyday life.