Exposed Data, Lack of 2-Factor Authentication Faulted in CR Video Doorbell Tests

Security vulnerabilities abound in five models of video doorbells tested, reported Consumer Reports Thursday: Eufy, GoControl, LaView and Netvue devices had susceptibilities that could expose user data, email addresses and passwords, it said. Eufy told the organization it released an app update to fix the problems on its T8200. CR said GoControl didn't respond to its request for a fix on the GC-DBC-1, and parent Nortek didn’t respond to our questions Friday. CR said LaView disagreed with the severity of issues found with the LaView One Halo LV-PDB1630-U. LaView didn’t respond to our questions. Netvue described the issues as “low-risk hidden dangers," saying it will try to provide a better user experience. It encouraged owners to use the latest version of the mobile app. Tests showed most video doorbells lack two-factor authentication. The only video doorbell brands offering two-factor authentication are Arlo, August, Google Nest, Ring and SimpliSafe, CR said. Blue by ADT told the group its doorbell will get the feature by year-end. CR said many manufacturers fail to minimize the amount of data they collect and don’t offer consumers an easy way to request a copy of their data or to delete it.