Hacker News new | ask | show | jobs
by andrepd 245 days ago
Is this seriously your conclusion? Might be a good time to get rid of the fucking spy camera owned by a multitrillion dollar corporation partnering with the state surveillance apparatus, is my opinion.

Have people never read/watched a sci-fi book/film before?
1 comments
bryancoxwell 245 days ago
I think encouraging people to enable E2EE is more realistic than asking everyone to throw out the Ring cams they’ve potentially spent hundreds on, yeah.
link
andrepd 245 days ago
Why people would purchase a telescreen to place on their homes in the first place is also incomprehensible to me.
link
ta1243 244 days ago
I can see benefits to a closed circuit camera. I've never felt the need personally.

If it's not running free software and treated in a secure fashion (camera can't talk to anything other than the server, enforced at the network level, etc) then it's not a risk per-se.

However people would rather pay up front and pay subscriptions to get outside companies to run it than run their own their own equipment. In the 90s when I was excited about tech I didn't even consider that aspect.

link
danparsonson 245 days ago
But... what makes you think that Amazon et al can't MITM the connection?
link
Aachen 245 days ago
From the linked document (in German for some reason, so I skimmed it as best I could), it sounds like the device will generate a password and you need to enter it on your phone. So symmetric encryption, not trusting the server to distribute keys that would be susceptible to MITM, and also not leaving users the options to choose bad passwords

Sounds good from a security point of view, although it also says they disable functions like having more than one person able to view the camera (having a partner be able to answer the door seems pretty fundamental; they probably just can't be arsed to make such functionality work with safety turned on...)

Of course, just like with Signal or anything else that gets regular updates, they can push an update to your device specifically that sends the decryption key out. You'll always have to trust them to not do something like that, but that's a whole different level from subpoenaing data they have on a hard drive

link