Bests & Worsts Reviews from Amazon

according to people

532
people found this helpful, as of 2023
ranked #32,551 most helpful out of 571,544,897 reviews
★☆☆☆☆
Sketchy traffic to China and other parts of the world. Multiple attack facets.
I bought this camera because it was inexpensive and supports Apple Homekit. The benefits are that it has a decent picture quality, night vision works but is a bit grainy and motion detection works up close (about 10 feet). The camera is fairly easy to setup through the Eufy app (attack surface 1) since you have to provide personal information to set up the app. I also have the Eufy Floodlight Camera. Viewing both camera streams is easy through the app, works over wifi just fine. Now the concerning part. Since you cannot change the network settings on the camera itself you have to hope there is no data leakage, Eufy touts how secure and private these cameras are it even has onboard MicroSD storage so all recordings can "stay local". Within 15 minutes of setting up my cameras, my IPS (Intrusion Prevention System) started alerting me of DNS (Domain Name Services) requests, I looked at the logs, sure enough, around 200 requests for random DNS servers throughout the world were coming through on the IP addresses of the Eufy cameras, strange right? So I forced all DNS requests through my firewall, within an hour the cameras became "unavailable" to display video. Now I'm not the tin foil hat wearing paranoid type, the has to be an explanation. Eufy's response: The eufy Security products also need a “phone book” to find servers on Internet. That’s why it needs DNS services, sends out DNS queries and gets responses from DNS servers. (wrong, DNS is set locally on your network router, typically to the DNS of your ISP) One of the global public DNS service providers is Google (Red Flag). We use it for the majority of the world. We also use another public DNS service in China (210.5.56.146 for example), the one we’re talking about here. This is for China customers (if it's for Chinese customers, why is my camera here in the US pulling DNS requests from it?). As you may know some Google services are not accessible in some regions. We, as a manufacturer, do not know where a device will be activated or used. So multiple DNS services are needed to ensure the product can be used in different regions. Hope you understand that. (I understand Eufy need's to allow network control of their cameras) Sending DNS queries doesn’t mean any security or privacy concern (WRONG, DNS tells who ever is listening what you search for on the internet and what sites you go to). The DNS traffic is only for server lookup. It doesn’t contain personal data (If that's true, why did my cameras cease to function when I forced out Eufy's DNS?). No matter the Google or the 114 DNS services, they both point to the same eufy Security servers. The eufy Security servers are hosted on AWS in the US, Singapore and Germany. Users’ data remains on the device local storage. The eufy Security devices encrypt and stream data directly to your phones. If you have any questions, feel free to let us know. (No questions, I now know why your cameras are so cheap, I paid for you to view my data on your "security servers". Lesson learned If you are OK with a Chinese company viewing your data, then this review was pointless. Good luck, stay safe.
April 2021 · Electronics · verified purchase
worser bester