Ring's Neighbors app exposed users' home addresses, locations due to security flaw

Credit: Unsplash/CC0 Public Domain

Ring's Neighbors app exposed users' home addresses and specific locations before the company became aware of the security issue.

The security bug affected users who posted on the neighborhood watch app, which lets residents report nearby crimes or public-safety issues. The Amazon-owned app was retrieving hidden data, including users' home addresses, from Ring servers, Tech Crunch first reported. The information wasn't visible for app users.

"We fixed this issue soon after we became aware of it," said a Ring spokesperson. "We have not identified any evidence of this information being accessed or used maliciously."

With the fix, the Application Programming Interface only provides the city, state and zip code of posts, as well as approximate latitude and longitude coordinates.

Amazon acquired the home security company, popular for the Ring Video Doorbell, for $1 billion in 2018.

This isn't the first time Ring deals with a security issue. In 2019, the for nearly 3,000 Ring camera owners was reportedly compromised, exposing information such as login names and passwords. To boost privacy, Ring introduced a two-factor authentication to log into accounts.

The company has also faced criticism over its partnerships with around the country and possibly pursuing facial recognition technology that could flag certain people as suspicious.

(c)2021 U.S. Today
Distributed by Tribune Content Agency, LLC.

Citation: Ring's Neighbors app exposed users' home addresses, locations due to security flaw (2021, January 18) retrieved 14 June 2024 from https://techxplore.com/news/2021-01-neighbors-app-exposed-users-home.html
This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no part may be reproduced without the written permission. The content is provided for information purposes only.

Explore further

Ring doorbell camera users required to use two-factor authentication to protect accounts


Feedback to editors