Eufy No Cloud Cameras Still Opened A Stream Off The Device

Eufy no cloud cameras were sold on a simple promise: the footage stays on the device, the stream is encrypted, and there is no cloud bill. In late 2022 that promise met the traffic on the wire. Researchers found face thumbnails leaving for a cloud server. In early 2023 Eufy told The Verge that its cameras were not natively end-to-end encrypted, and that live video for the web portal had gone out unencrypted. The Verge played those streams from across the United States in an ordinary media player.

Trust is a local claim that matches the packets. Security is a stream that a stranger cannot open with a link. Incentive is a camera that still alerts the phone without parking a copy on a vendor server. Eufy local storage cameras had the marketing of the first and the plumbing of a portal. The portal is the part that left the house.

Era 4 is the Home Companion that keeps the camera and drops the portal. The two FTC records beside this one are Ring home cameras and the TRENDnet baby monitor.

What Eufy No Cloud Cameras Were Sold As

Before November 2022, Eufy marketed "No Clouds or Costs," with encrypted feeds and storage on hardware in the home. That pitch is why people who did not want a Ring account bought the camera. Local was the product, not a setting buried in a menu.

A local camera can still be a good camera. The test is whether "local" survives contact with the alert, the web page, and the reset flow. Eufy local storage cameras passed the brochure and failed the test. The Electronic Frontier Foundation has spent years on products whose privacy story is a slogan in front of a server. A slogan does not keep a thumbnail on the shelf.

The FTC's TRENDnet case is the older version of the same gap: a camera sold as secure, and a feed that strangers could open. Eufy no cloud cameras arrived a decade later with better words and a portal anyway.

What Eufy Local Storage Cameras Actually Sent

Two paths left the device. One carried a face, small, for the phone to buzz. One carried live video, unencrypted, for a page on the company's site. Eufy described both after reporters already had the evidence. Ars Technica's report is the November record of the thumbnails. The Verge is the record of the company's later emails about the portal.

Face Thumbnails Left The Eufy No Cloud Cameras

Security researcher Paul Moore showed cameras uploading name-tagged face thumbnails to cloud servers, and showed a stream that played without the authentication a buyer would expect. A second look, from SEC Consult, saw the same kind of thumbnail move through Amazon Web Services, and saw encryption keys that appeared identical across HomeBase units.

Eufy answered that video footage and facial recognition stayed on the device, and that thumbnails for a phone alert were stored briefly on AWS, behind an account, then deleted. A thumbnail with a name on it is still a picture of a person in the house, on a server the household does not run. "Briefly" is a retention choice the company makes. The buyer who turned cloud upload off had not chosen it.

A Web Portal Played Eufy No Cloud Cameras In VLC

Eufy wrote to The Verge that a registered user could open the web portal, enter a debug mode, find the live stream in the browser's tools, and share that link. The link played outside the system. The Verge did play unencrypted streams in a common media player from across the country. Eufy said the portal had not been built with end-to-end encryption, that the app path was encrypted, and that recorded video to the portal was encrypted. Live view on the web was the hole.

The company said it then blocked debug mode, encrypted the portal stream, and started moving cameras to WebRTC. The IETF's WebRTC overview is the specification for that kind of encrypted real-time session. Encryption on a hop the vendor operates is a better portal. It is still a portal.

Eufy Said The Portal Was A Small Exception

Eufy told The Verge that less than 0.1 percent of active users used live streaming on the web portal, and that encryption should have been designed into that page from the start. A small share is not a small design. The camera could produce an unencrypted stream because the server asked for one. Every camera that shared that build shared that ability. The household that never opened the website still owned a device that knew how to serve the website.

NIST's Zero Trust guidance puts the boundary on the device, not on a promise about how rarely a portal is used. Eufy local storage cameras kept a second boundary, on eufy.com, and the second one was the one that failed open.

Eufy No Cloud Cameras Can Use The Home Computer As The Only Address

A fix that encrypts the vendor portal accepts the portal. The camera that never calls the portal has nothing to debug and no link to share. The alert can still fire. It fires because the Home Computer saw the frame, not because a thumbnail waited on AWS.

The Home Computer is that machine. The Home Companion is the era that keeps the indoor camera in the job and takes the vendor out of the path. The Freedom Guide is how a household starts.

A Push Alert Can Be A File At Home

The useful part of the thumbnail is the buzz in the pocket: someone is at the door, or the room changed. That buzz can come from a file the house already holds. A copy parked for a day on a cloud bucket is a second product, with its own login and its own expiry clock. Eufy no cloud cameras treated the alert as a reason to upload. A house treats the alert as a reason to look at its own disk.

Encryption To A Vendor Is Still A Vendor Path

WebRTC can be a direct session between two machines the owner runs. Pointed at a company portal, it is a locked tunnel to a site the company can change. Eufy said the new portal stream would be end-to-end encrypted, and also described a design that had already produced an open stream when the page was built without that protection. The next page is one software update away. What a distributed cloud is is a network of machines the users already hold, which is a different address book from a single web portal.

DLDeploy Does Not Add A Portal

DLDeploy flashes a local ESP32 and grants it to the owner. We are building the direct integrations so the board's only address is the Home Computer. There is no debug mode on a vendor site, because there is no vendor site in the session. The DLDeploy article says what that porch, nursery, or shelf camera is for. A camera without a cloud stack is the same refusal in code. Eufy no cloud cameras are the caution: read the packets, not the slogan.