It would be logical to assume that when you change your password, all the devices or apps that were previously accessible with your old one would not be able to access the files you saved or the app itself. However, the video doorbell from Amazon acquisition Ring apparently has not received that memo. It was recently discovered that someone (an ex-partner) was still able to access the camera even though the owner changed the password already. The company says they are taking steps to “improve the password change experience.”
Apparently, if your log-in credentials are still valid, you can not only still view the camera despite the password change, but you can even download the videos saved on the app. That is a huge security issue for the service and for Amazon who acquired the company last February. The online retail giant is expected to incorporate Ring into their delivery solutions like Amazon Key but hopefully, they will resolve this issue first before doing so.
For its part, Ring reminded customers that they should not share their username and password with anyone, not even their partners. They have a “shared users” feature where you can add trusted family members but you will still be able to maintain control over who can be part of it, as well as easily remove those whom you don’t want to have access to your video doorbell and other Ring products you may have.
As to what steps Ring is taking to ensure this will not happen again, we have no idea as of now. Hopefully, there are no other cases where this will be a serious problem.
VIA: Engadget
