Anker admits its eufy security cameras' live view feature on its web portal “has a security flaw”, but fails to address why anyone can view unencrypted streams
On the last episode of “Will Anker ever tell us what's actually going on with its security cameras rather than lying …
Context & Ripple Effects
This admission lands mid-spiral: a security researcher had just reported that Eufy cameras uploaded images to the cloud without consent and were reachable without authentication (researcher findings of cloud uploads and unauthenticated access), and days earlier Eufy quietly stripped ten encryption and privacy commitments from its own privacy page (removal of ten privacy commitments). Today's statement concedes the web-portal live view flaw while pointedly not explaining the unencrypted streams underneath it.
The pattern is not new for the brand — back in 2021 Eufy owners could open other users' camera feeds, which the company called a bug and fixed with a logout-and-reset (2021 cross-user camera access bug) — and it mirrors budget-camera rival Wyze, which later disclosed ~13,000 customers briefly seeing strangers' feeds and had sat on remote-access vulnerabilities flagged by Bitdefender for months or years. The question hanging over this story is whether Anker's admissions are corrective or merely reactive.
First-order effects
- Eufy camera owners face renewed uncertainty about who can view their live streams, with Anker confirming the web-portal flaw but offering no explanation of the unencrypted stream delivery the question targets.
Second-order effects
- Anker's credibility gap pressures the budget smart-camera segment: Wyze's parallel disclosure history means both brands now compete under a cloud of unresolved trust questions, pushing buyers toward vendors that can document encryption claims rather than just assert them.
Third-order effects
- If the pattern of quiet privacy-page edits followed by partial admissions holds, consumer camera security is drifting toward regulator- and researcher-forced disclosure, where vendors state encryption promises only after independent verification — and marketing claims lose standing as evidence of actual protection.
The trend: Consumer smart-home camera makers are being dragged from marketing-driven privacy promises to externally verified security disclosure, as researchers repeatedly expose the gap between the two.