Multiple Eufy Homebase 2 Security Issues

Multiple Eufy Homebase 2 Security Issues - DO THIS NOW!

Рет қаралды 56,949

2 жыл бұрын

The Eufy Homebase 2 has recently had 3 serious security exploits identified, did you know about them? In this video I'll take you through each one and what you need to do to make sure you're Eufy Homebase 2 is not vulnerable.
If you've just bought a Eufy Homebase 2 you definitely need to watch this video!
Remember to SUBSCRIBE to the channel so you don't miss future content
SUPPORT THE CHANNEL 🙌
Buy Me a Coffee: www.buymeacoffee.com/byteofgeek
READ MORE 🌐
My Website: www.byteofgeek.com
YOU CAN FIND ME ON 👍
Twitter: / byteofgeek
Instagram: / byteofgeek
Facebook: / byteofgeek
#eufy #eufysecurity #smarthome
Some of the links above may be affiliate links in which I receive a small commission if you click on the link and purchase an item. You're not obligated to use these links but if you do then it does help fund the channel to bring extra content to you!

Пікірлер: 56

@Byteofgeek 2 жыл бұрын

What are your thoughts on these security issues? Let me know down below and if you enjoyed the video don't forget to LIKE and SUBSCRIBE to the channel 👍

@davidputt4638 Жыл бұрын

Now that the Homebase 3 has come out I’d love to see another security evaluation to see what they fixed and what is still needed.

@vizion68 Жыл бұрын

What transport protocol does Homebase use to connect to its cameras ? IPv6 or something entirely different ?

@Vermilicious Жыл бұрын

I've been looking at these gadgets, and just read a comment by someone who had their cameras stolen and was unable to access the footage of the thief. He got a reply from Eufy confirming that you can't access recordings from devices that aren't connected to the Homebase. That's a serious flaw if you ask me. Now there are other vulnerabilities too. It doesn't look so promising now, unfortunately :(

@paulaj2829 8 ай бұрын

I'm just at the stage where I'm charging my Camera's before I install !!! can anyone give me some good idea's which I should know from what I've been reading here..

@bal2202 Жыл бұрын

I know this isnt a question about this video but can u add different video cameras from other companies to the home base? Like arlo etc?

@Byteofgeek Жыл бұрын

No only Eufy cameras can be connected

@larsthorwald3338 Жыл бұрын

Rather than spending your life worrying about all your IoT nodes, just give them their own physical network with its own DHCP server, firewall ruleset, etc. All you need is a decent edge router, something like a Unify 6P. Easy. Then things like your Eufy base station, your phone, thermostat...any of the "smart" devices that want 'net access can talk to themselves and the internet, but they can't reach the main LAN where things you actually care about are hosted, like your computers.

@Byteofgeek Жыл бұрын

This is very true and definitely best practice if you are able to do so - exploits that give access to footage is something to be concerned about though.

@gitit. Жыл бұрын

@@Byteofgeek @lars how would you have the HomeKit communicate to the cameras while doing this?

@kekidit Жыл бұрын

Thanks for sharing! The last version (15 september 2022) is 3.2.1

@gitit. Жыл бұрын

So have all the issues have been patched?

@F16Jap 2 жыл бұрын

Thanks for sharing! Looking to buy this one, but had some general security concerns on this. Can't seem to find how the app gets your videos: does it connect to your homebase "directly" (using vpn or just https connection) to get the videos and camera output?

@Byteofgeek 2 жыл бұрын

It all goes via the Eufy servers, they act as a relay to your homebase 🙂

@F16Jap 2 жыл бұрын

@@Byteofgeek and therefore could/can inspect/save the clips?

@Byteofgeek 2 жыл бұрын

Yes the app allows you to view and save the clips locally to your mobile device

@aurelianstanica2708 2 жыл бұрын

Is kind of hacking? But how they will be able to access, control, etc your device, camera, or footage? They will need first to get the IP address, how they will get your IP? Or can be found somewhere online in some database?

@ArmBradPitt 2 жыл бұрын

As in most cases, people who do these type of things are continuously scanning the internet looking for unwitting victims. They obviously wont know who YOU are yet, but all they care about in their recon is the IP that has these vulnerable devices.

@Silentaudits7 Жыл бұрын

just checked. my HB is on 3.2.1 , dated 2022.09.09 . im guessing im safe ? Thanks fpr your help and im subbing . nice work BoG . Will the S380 take over from HB2 if and when its available if i buy it

@Byteofgeek Жыл бұрын

You should be fine as that's relatively new version. Be aware that the security issue around resetting and losing footage remains on the new Eufy devices so moving to the HB3 is unlikely to make that much of a difference in terms of security

@kevinhughes9801 2 жыл бұрын

Useful vid thanks for sharing

@Byteofgeek 2 жыл бұрын

Thanks for watching 👍

@roccosarli6939 10 ай бұрын

I have two properties I use a bridge to share Wi-Fi. I have a dozen or so cameras. Worked fine for a few months and suddenly I get the kiss of death home base3 or 12 bs. Not reliable waste of money. No help.

@cebtropico Жыл бұрын

Can you use homebase 1 with cloud service? I just paid for it and won’t show me any videos at all? On the app

@Byteofgeek Жыл бұрын

Not something I know the answer to as I have a HB2, maybe someone else can comment?

@eosme Жыл бұрын

Just got it today and installed. It auto updated the firmware. So has the latest been patched to fix these vulnerabilities?

@Byteofgeek Жыл бұрын

If it's auto updated it should certainly has fixes for everything mentioned in the video

@davidostrander9871 Ай бұрын

Thank you for making this video. A professional criminal syndicate is very aware of these vulnerabilities in my area. Although I have the updated software version on my Homebase2, it hasn't mattered; the first two vulnerabilities mentioned are occurring. I am of the belief that a WiFi security system is worthless due to white collar criminal tech expertise. As you mentioned, hacked cameras are an advantage for the hi tech criminal/syndicate. We are at this point in America now. Closed circuit, wired security is the only preventable solution.

@makkeyn Жыл бұрын

which version is better,one or two of homebase?? Thanks!

@Byteofgeek Жыл бұрын

Homebase 2

@sophiarodriguez1861 2 жыл бұрын

Thank you for that!!! I created a return label on Amazon and will drop them in UPS tomorrow for a full refund. They won't get my money if they won't allow access to the videos if the camera is not alive.

@gew12 Жыл бұрын

That's a little dramatic. Systems have holes all the time that are patched. Microsoft finds them every month in their products.

@sophiarodriguez1861 Жыл бұрын

@@gew12 There are holes and there are "critical vulnerabilities" or dysfunctional products. The whole purpose of security cameras is to provide access to the data after an incident. Eufy doesn't do that (if the camera was stolen), so Eufy is literally useless.

@gew12 Жыл бұрын

@@sophiarodriguez1861 This was probably fixed before you made your comment so it's a little dramatic overreacting to an issue that probably doesn't even exist now. As a programmer I know that every system on the planet has bugs of which some are major. Even life support systems in hospitals have bugs and this one is technically not even a bug it's more an assessment of what a hacker might do. What you should focus on is their reaction to issues not issues. That's like believing your life is perfect with never making an error. It's not the error you make it's how you deal with it that matters.

@me1299 2 жыл бұрын

I've got a worse one for you. When you want to steal something just press the sync button for 10 seconds on a camera causing it to unpair. And even better I'm not making this up, it will remove all videos from the device on your homebase.

@Byteofgeek 2 жыл бұрын

Yep, did a video on the channel only 3 months ago about this very issue 👍

@aurelianstanica2708 2 жыл бұрын

But if you have more cameras that are arranged in a way that can record each other I think is alright innit? Otherwise, anyone can steal anything, even the camera...if someone comes from behind the camera and is not backed by another camera... That's the setting I did myself due to another issue...the attachment of the cameras is not very secure and you can unscrew it so easily...

@casshernsins8333 2 жыл бұрын

@@aurelianstanica2708 1. Users shouldn’t have to resort to doing that. 2. Thief can just resync the 2nd camera. So your suggestion doesn’t work

@gh8284 Жыл бұрын

I did this to one of my cameras and I still have access to the videos?

@aurelianstanica2708 Жыл бұрын

@@casshernsins8333 If the thief do that to the second camera, the first camera will record the thief, you get it?

@paulcycserfalvi-young1010 Жыл бұрын

Anything on "can't connect to application server" also won't work on ethernet only WiFi. Error code -23

@Byteofgeek Жыл бұрын

It could be either Eufy services are down, which does happen occasionally or there's a problem with your system talking out to the internet in which case a reset/factory reset may help.

@paulcycserfalvi-young1010 Жыл бұрын

@@Byteofgeek thanks for quick reply, tried all resets works on WI fi not on ethernet ( does sometimes) can't leave feedback or any type of Comms to eufy

@Byteofgeek Жыл бұрын

In that case I can only assume it's either a) set to WiFi in the app, b) a faulty ethernet port or cable or c) an issue with routing via whatever the ethernet cable is connected to

@ahoyskid Жыл бұрын

It’s super messy. Especially when you have 2x HomeBase 2s and 1x HomeBase 3. They should act as a mesh network.

@Byteofgeek Жыл бұрын

Whilst I've never needed more than 1 homebase, I can see the benefit of them working like that 👍

@dcharles1973 5 ай бұрын

Most new products will run through a version update prior to running for the first time. Eufy do the same. 7.42 to tell people to check or update the latest version 🙄

@Byteofgeek 3 ай бұрын

Yet still people's cameras get hacked, go figure 🤔

@johnjohnsmithsmith77 9 ай бұрын

Watched whole video, got nothing from it just jibberjabber. Basically talked whole of video. Gleaned almost nothing from it.

@Byteofgeek 9 ай бұрын

Suggest you need to watch and LISTEN next time John.

@MightyMick88 Жыл бұрын

I have been complaining to Eufy from the first week I received the Eufy 2c nearly 2 years ago. In my experience this system is the biggest heap of Anker Chinese CRAP that I have purchased. Eufy do nothing except have you running around moving cameras and bullshit. I will never buy a Eufy product ever again. Sh I t rating 12/10 well done Goofy.