Security camera feeds of 13 thousand people were leaked

More than 13,000 consumers’ Wyze camera feeds affected by service outage It occurred on Friday (16). The information was disclosed in an official email sent to affected users.

“The outage was caused by our partner AWS and shut down Wyze devices for several hours on Friday morning. If you tried to view cameras or live events during that time, you probably won’t be able to,” the company said in a statement.

In an attempt to restore live streaming services, Wyze exposed users’ internal circuits. Consumers were able to watch other people’s cameras for a moment.

I was watched by someone
byu/H3H3ather inwyzecam

Initially, Wyze co-founder David Crosby stated that only 14 consumers saw others’ posts. However, later this number increased to 13 thousand affected consumers.

Instability on the platform made posts from strangers appear in the “Events” tab. As soon as the problem was noticed by Wyze, the tool was disabled.

According to Wyze, approximately 1,500 people tried to access others’ streams, and some of them were able to watch the stream in real time.

The company claims: It is stated that the error is caused by a third-party cache client library integrated into the system. “This client library experienced unprecedented loading conditions resulting from devices suddenly coming back online.

“As a result of the increased demand, it confused the device ID and user ID mapping and linked some data to the wrong accounts,” he said.

repeated failure

In September 2023, a similar flaw affected Wyze consumers. On this occasion, This breach allowed consumers to view all events recorded by someone else’s camera circuit – very similar to what happened in the last case.

Consumers are not very happy about the leak. On social media, people say they feel the security breach has been breached.

Now Wyze is trying to fix the problem by adding an additional layer of verification to the Activities tab. “We have also modified our system to bypass the cache for checks on user-device relationships until we identify new client libraries that have been thoroughly tested against extreme events like what we experienced on Friday,” the company explained.

At the end of the statement, the company apologized for what happened. However, this should not be enough to prevent lawsuits that may arise due to violation.