![]() Woodruff says your “public location and live video are enabled by default!” When you first register a new camera, there is a checkbox to “Allow BlackVue Cloud Viewer to access your dashcam’s GPS data.” That is followed by this notification: “We use this to let you track your car’s location and speed, and share traffic information with other BlackVue users. However, as personal video may be transmitted you should take special care in deciding what information you share. The options to publicly share location, video, audio and camera name are listed under the camera’s privacy settings where it also notes:īy sharing your Live View you can let other users vicariously experience the excitement and pleasure of driving all over the world. In the below video, Woodruff shows the “deceptive” registration process.įollow-up with a more clear video of the registration process (as of 1 hour ago today): APPARENTLY even if you OPT OUT of these settings, if you re-register your camera later, YOU'RE OPTED BACK IN - again, without your knowledge or consent. 'Deceptive' BlackVue registration process I suppose if you needed proof, enabled audio along with the camera is one way to go – as seen by a Tesla Model 3 owner who got pulled over because the cop said he couldn’t have the computer mounted – not realizing the center console is standard in a Tesla. It's safe to assume almost all of these people don't know they are broadcasting everything live.”Īudio, too? It is an option in the camera’s privacy settings, as is publicly sharing location, video, and camera name. Woodruff explains the problem and even includes live dashcam video feeds from other people’s vehicles in the video below.Ī post on Reddit goes so far as to state: “You can browse BlackVue users worldwide and watch/hear their cars using their software as well as to know their exact GPS location. Are you new to the internet or something? It's bad enough when the default is "share all my information with ", but if it's your live GPS and camera view from inside your car, PUBLIC SHOULD NOT BE THE DEFAULT. To that, Woodruff pointed They should not *BE* the default privacy settings. After there was no response, Woodruff went public:Ĭloud-ready #dashcams illegally broadcast your EXACT GPS location, AND LIVE VIDEO from inside your car, without permission, PUBLICLY on the internet! Registration process: #infosecĪt that point, BlackVue replied to the tweet, saying it was reported internally: “Our developers are working on a fix to clarify the dashcam registration process and default privacy settings.” Woodruff contacted BlackVue in September and gave the company a week to respond. Furthermore, he believes it was “sheer unadulterated incompetence that lead to this massive breach of their customers’ security and trust” as opposed to purposeful maliciousness. Woodruff is convinced that most folks don’t know about the automatic opt-in and the default settings, which “are all but hidden in a secondary settings menu – and that is terrifying.”Īs a software developer, he decided “the BlackVue software configuration process and user experience is probably the worst and most poorly designed” that he has ever seen. Users are opted-in by default to share the precise GPS location of their vehicles on a map, as well as a stream live video feeds of the front and rear cameras.ĭo you really want to broadcast a live feed of where you go, of the inside your garage, or where you drop your kids off at school? Do you ever do anything you might not want the world to know, such as visit a head shop, an erotica store, seek treatment at a medical center, or even visit the person with whom you might be having an affair? However, Woodruff warned that thanks to a sketchy registration process, that live view is available to the public. Installation and all cost him a whopping $1,200.īlackVue comes with a Cloud Viewer which allows owners to see a live view of their car. That’s what IT pro Tim Woodruff – who is a software architect and developer for IT service management software, a former pen tester, and author – did after a semi hit his new Tesla Model X and insurance refused to pay even though the driver admitted to not seeing the Tesla. ![]() Let’s assume you dropped around $400 or so for a BlackVue dashcam, which includes “Over the Cloud” capabilities. ![]() They have made the video feed from their front and rear dashcams, as well as the mapped GPS location of the vehicle – the speed it is going or if it is parked – and even audio from inside the vehicle, available to the public. Just as some people are unknowingly streaming live video from security cams in their homes, some are also unknowingly live-streaming video from their cars.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |