Cold TAKE: Amazon's New Encryption Method Still Doesn't Deliver Real Privacy

Summary

Amazon's Ring cameras are introducing a new feature called Throw Away the Key Encryption (TAKE). This method temporarily stores encryption keys in Ring's cloud to enable features like smart alerts and video search, but it still grants Ring access to unencrypted video for 24 hours.

IFF Assessment

FOE

The new encryption method still allows the company access to unencrypted video data for a significant period, undermining true privacy.

Defender Context

This article highlights a common trade-off between functionality and security in consumer IoT devices. Defenders should be aware of how vendors implement encryption and the potential for backdoors or temporary access that can be exploited or compelled by authorities.

Read Full Story →