This wildly unsafe video doorbell is still for sale on Amazon – here’s what you need to know
In a recently published article, Consumer Reports (CR) is warning people about a defective video doorbell sold on Amazon that can easily be taken over by a complete stranger.
The device itself does not have a specific name as it is sold under different brand names on multiple trading platforms; not just Amazon. These names include Fishbot, Gemee, Luckwolf, Rakeblue and Tuck. It doesn’t matter where or from whom you buy the doorbell, they can all be controlled via the Aiwit app, which is itself owned by the Chinese electronics company Eken. CR, as part of his research, bought the device and had a few staff members test its safety. Needless to say, it’s really bad. All a bad actor needs to adopt Eken’s product is to have Aiwit’s app installed on his smartphone.
Poor security
According to their findings, a random person can walk up to a target’s home, “press and hold the doorbell button to put them in pairing mode,” then connect them to their phone’s Wi-Fi hotspot and take full control. What’s even scary is that by gaining access, strangers can see the serial number of the doorbell. That number allows them to remotely view still images from the source video feed at any time. If that’s not enough, the photos are time-stamped so they know exactly when someone leaves and comes home.
The safety concerns don’t stop there. These doorbells essentially “expose your home IP address and” the name of your Wi-Fi network to the Internet without any form of encryption involved. Serial numbers can be shared with others online, giving those people access as well. CR points out that the devices “do not have a visible ID issued by the Federal Communications Commission (FCC).” Without this label, it is actually illegal to sell the product in the United States.
What’s particularly egregious is that Eken’s doorbell has been given the Amazon’s Choice badge, meaning it’s promoted by the platform as a high-quality item.
After the investigation, CR contacted multiple platforms to inform them of the defective doorbell. Few responded; One of those was Walmart, which told the publication that they had removed the product from their website with no plans to bring it back. Amazon, on the other hand, remains silent. She were still selling the device at the time I write this. Consumer Reports even contacted Eken, but they received radio silence. Ny Breaking has also contacted Amazon and will update this story with its response.
It is worth noting that Eken sells indoor cameras, although it is not known whether these also have the same vulnerabilities. CR told TheVerge that they have not tested the other models, nor does it appear that the Aiwit servers have any form of defense against potential hackers. Anyone can send in a bunch of requests and gain access to people’s feed seemingly without much hassle.
Consumer Reports recommends that current owners immediately disconnect the Eken video doorbell from their WiFi and remove it from their door. They are also asking online retailers to be more proactive in ensuring the quality of the items they sell.
If you’re looking for other options, check out Ny Breaking’s list of the best video doorbells for 2024.