Header banner
Revain logoHome Page
Todd Stepp photo
Greece, Athens
1 Level
696 Review
25 Karma

Review on πŸ“· eufy Security Solo IndoorCam C24: 2K Wi-Fi Indoor Camera with AI, Night Vision & Two-Way Audio by Todd Stepp

Revainrating 1 out of 5

Outline the traffic to China and other parts of the world. Several aspects of the attack.

I bought this camera because it's cheap and supports Apple Homekit. The pros are that it has decent image quality, night vision works but is a bit grainy, and motion detection works at close range (around 10ft). The camera is relatively easy to set up via the Eufy app (Attack Surface 1), since personal data is required to set up the app. I also have a Eufy Floodlight camera. Viewing streams from both cameras is easy via the app and works seamlessly over Wi-Fi. Now the touching part. Since you cannot change the network settings on the camera itself, you have to hope that there is no data leak. Eufy promotes the security and privacy of these cameras. It even has built-in MicroSD storage so all recordings can "stay local". Within 15 minutes of setting up my cameras, my IPS (Intrusion Prevention System) started warning me about DNS (Domain Name Services) requests. on the IP addresses of the Eufy cameras, strange right? So I forced all DNS requests to go through the firewall and within an hour the cameras were "unavailable" to view video. Now, I'm not some paranoid tinfoil guy, that's the explanation. Answer from Yufi: eufy security products also need a "phone book" to find servers on the Internet. Because of this, it needs DNS services, it sends DNS requests and receives responses from DNS servers. (Wrong, DNS is set locally on your network router, usually your ISP's DNS) One of the global public DNS providers is Google (Red Flag). We use it for most of the world. We also use another public DNS service in China (e.g. 210.5.56.146) which we are talking about here. This is for Chinese clients (if this is for Chinese clients, why is my camera pulling DNS queries from it here in the US?). As you may know, some Google services are not available in some regions. As a manufacturer, we do not know where the device is activated or used. Therefore, multiple DNS services are required to use the product in different regions. I hope you understand. (I understand that Eufy needs to allow network control of their cameras) Sending DNS requests means no security or privacy issues (WRONG, DNS tells who ever listens to what you search on the internet and what websites you visit). DNS traffic is for server lookup only. It doesn't contain any personal information (if that's true, why didn't my cameras work anymore when I replaced Eufy's DNS?). Regardless of Google services or 114-DNS, both point to the same eufy Security servers. eufy Security Servers are hosted on AWS in the US, Singapore and Germany. User data remains in the device's local storage. eufy Security devices encrypt and transmit data directly to your phones. If you have any questions, please feel free to let us know. (No question, now I know why your cameras are so cheap, I paid for you to view my data on your "secure servers". Lesson learned. If you agree to a Chinese company looking at your data, this is it Rating meaningless.. good luck.. take care.

Pros
  • nice thing
Cons
  • poorly thought out