A new report may have you thinking twice, if you were planning on buying a used Nest Cam.
According to a Wirecutter report on Wednesday, some users who have sold their Nest Cam Indoor devices were still able to access images from those devices, even after a factory reset had occurred. That means those who sold their Nest Cams could tap into the security feeds of the new owners.
The report said only Nest Cam Indoor devices that have been paired with a Wink hub — a hardware product that allows users to connect and sync an array of smart home devices — were vulnerable to the newly discovered privacy issue. Previous owners are reportedly able to view the images via their Wink app.
A Google spokesperson told Business Insider that after recently becoming aware of the issue, the team rolled out a fix late on Wednesday.
"We were recently made aware of an issue affecting some Nest cameras connected to third-party partner services via Works with Nest," the spokesperson said. "We've since rolled out a fix for this issue that will update automatically, so if you own a Nest camera, there's no need to take any action."
The spokesperson did not say how many users had been impacted.
According to Wirecutter — which replicated the scenario itself after hearing murmurs of the bug on a Wink Facebook Group — the content that had been accessible by previous device owners was "still images snapped every several seconds" rather than the typical video stream captured by the security cams. Even so, being able to view images from the new device owners was a concerning privacy breach.
For Nest, the security blunder reported on Wednesday harkens back to February, when it was discovered that a microphone had been embedded in its Nest Secure alarm system without giving notice to its users. At the time, the company said the microphone was "never intended to be a secret and should have been listed in the tech specs."
Got a tip? Contact this reporter via Signal or WhatsApp at +1 (209) 730-3387 using a non-work phone, email at nbastone@jkmperu.com, Telegram at nickbastone, or Twitter DM at @nickbastone.
