Mac Mind

Daniel Feldman
  Certified Member of the
  Apple Consultants Network
  Apple Certified (ACHDS)
  E-mail:  [email protected]
  URL :

[Mac Mind @MacMindTweets]

https://t.co/CuKyji41bC

[Mac Mind @MacMindTweets]

https://t.co/s6Y7RiQnPQ

[Mac Mind @MacMindTweets]

https://t.co/JmVN67i71E

[Mac Mind @MacMindTweets]

https://t.co/3rWFAkntPW

[Mac Mind @MacMindTweets]

https://t.co/cFZd8r1Qdp

[TeamViewer @TeamViewer]

A subset of our users is currently experiencing latency when accessing our services. Our engineers have not yet confirmed the underlying cause and they are working on a resolution. Please follow our status page for more info: https://t.co/sTWuU8Zjrp

[Mac Mind @MacMindTweets]

TeamViewer Outage :
01/27/2023: 12:25 PM Pacific time, California
TeamViewer website login nor TeamViewer application allowing logins, for me in California at this time
Their status page:known problem they are working on fixing for at least 2 hours +now
https://t.co/nJdZQvaLAF

[Paul Moore - Security Consultant  @Paul_Reviews]

You have some serious questions to answer @EufyOfficial

Here is irrefutable proof that my supposedly "private", "stored locally", "transmitted only to you" doorbell is streaming to the cloud - without cloud storage enabled.
#privacy

https://t.co/u4iGgkWkJB

[Paul Moore - Security Consultant  @Paul_Reviews]

Ah well, the cats out the bag now... so may as well tell you.

You can remotely start a stream and watch @EufyOfficial cameras live using VLC. No authentication, no encryption.

Please don't ask for a PoC - I can't release this one.

Heads up @TechLinkedYT @LinusTech

[Paul Moore - Security Consultant  @Paul_Reviews]

.@EufyOfficial finally admitted uploading pictures, faces & names to the cloud without permission.

They claim they're only used for notifications. Thus, as per GDPR, they are "deleted immediately when you
1) Delete it
2) Close the account"

Both a lie.
https://t.co/BLYtafpjDB

[Paul Moore - Security Consultant  @Paul_Reviews]

Thank you to @GazTheJourno at @telegraph who happened to call during my 3rd test.

I deleted the account during our call and we could still download the images, despite deleting them manually first, then deleting my account.

You claim this doesn't breach GDPR @EufyOfficial?!

[Paul Moore - Security Consultant  @Paul_Reviews]

I tweeted this yesterday and at no point did it occur to me.... how is that possible?!

If the device is hard reset & unpaired, and re-pairing restores the footage, where's it coming from?

Hmm.

[Paul Moore - Security Consultant  @Paul_Reviews]

Just read this.

It makes research worth doing.

[Paul Moore - Security Consultant  @Paul_Reviews]

Quick update on the #eufy situation...

It appears they've removed the background call which reveals the stored images - but not the footage itself.

They also encrypted other calls to make it almost impossible to detect.

This is NOT how it should be handled.

[Paul Moore - Security Consultant  @Paul_Reviews]

Question everything.

Absolutely true, they're not ZK.

[Paul Moore - Security Consultant  @Paul_Reviews]

Just had a lengthy discussion with @EufyOfficial's legal department.

It's appropriate at this stage to give them time to investigate and take appropriate action; conversely, it's not right for me to comment further.

I will provide an update, as & when possible. Thanks!

[Mac Mind @MacMindTweets]

Get Microsoft Office Home & Business for Mac 2021: Lifetime License - Get All Essential Microsoft Apps for Your ... https://t.co/SjuvUMkBsK
#MacSoftware #Apple #Office #MicrosoftOfficeForMac

[The Mac Observer @MacObserver]

Fraudulent Chinese Apps Elude Apple’s Strict Mac App Store Review Process https://t.co/dBko4EYDbH

[iMore @iMore]

Chinese Mac apps found abusing App Store https://t.co/VZeAYcemOT

[Mac Mind @MacMindTweets]

@RipCITY57442946 @WellsFargo @WellsFargo @Ask_WellsFargo

update (it's working!) : 6:27pm Pacific time: Just tried mobile app again, after about 1 hour of downtime, it's now working!
:^)

#WellsFargo #WellsFargoMobile #WellsFargoMobileApp