A False Lens of Security

Thinking of buying an IP camera to keep an eye on your home or business when you’re away? Or maybe you‘ve already set up a security camera that you can access remotely? If so, you’ll want to read today’s news from the FTC. 

TRENDNet, a tech supplier, has agreed to settle FTC charges that the company didn’t provide adequate security for internet cameras it marketed as a way to monitor “babies at home, patients in the hospital, offices and banks, and more.” 

People installed these cameras in areas they wanted to monitor, and then viewed live feeds over the Internet through a computer or mobile device. Sounds handy, right? 

Unfortunately, according to the FTC complaint, TRENDnet didn’t provide adequate security for customers accessing their video feeds — online or through mobile apps.

For starters, TRENDnet didn’t encrypt usernames and passwords, which would make it easy for hackers to get them and gain access to private video feeds.

Even worse, a security flaw in the settings for these cameras allowed a hacker to access private feeds — about 700 of them — and then post them online for the world to see. These compromised feeds allowed strangers to view private areas of users’ homes and their daily activities.

As part of the settlement, TRENDnet must notify users of the security problems and tell them how to fix them. The company also must implement a comprehensive security plan.

If you’re in the market for an IP camera, look for security features that will help protect your personal information. Our new article, Using IP Cameras Safely, has tips to help.

Comments

That's awful! Shame on Trendnet!

Wait until those "kid tracking" tools get wide spread, I'm betting most of them have even less security.

Thats really bad

What kind of "legal" ramifications are there implied or otherwise for using a remote camera? Is the homeowner obligated to let folks know they are being watched and/or recorded? Enquiring minds need to know

Thank you

Want to proctect my information

I have the same concerns as "whoareyou" above. What legal liability does one take on when using a remote or hidden camera? And what actions, if any, can mediate it?

Leave a Comment

Comment Policy

Read Our Privacy Act Statement

It is your choice whether to submit a comment. If you do, you must create a user name, or we will not post your comment. The Federal Trade Commission Act authorizes this information collection for purposes of managing online comments. Comments and user names are part of the Federal Trade Commission’s (FTC) public records system, and user names also are part of the FTC’s computer user records system. We may routinely use these records as described in the FTC’s Privacy Act system notices. For more information on how the FTC handles information that we collect, please read our privacy policy.