[情報] GOOGLE智能封殺小米

作者: VOT1077 (Arsene 風之谷衛鷹 )   2020-01-03 12:00:17
1. 情報or新聞 連結:
(超過一行記得縮網址唷)→小提醒看完可以用Ctrl+y刪除此行
https://www.reddit.com/r/Xiaomi/comments/eioyyt/xiaomi_camera_is_showing_stills_from_other/fcskh7t/?utm_source=share&utm_medium=web2x
https://reurl.cc/e5lgaj
其他新聞
https://www.androidpolice.com/2020/01/02/uh-oh-xiaomi-camera-feed-showing-random-homes-on-a-google-nest-hub-including-still-images-of-sleeping-people/
https://reurl.cc/EKlyym
Google shutting down Xiaomi access to Assistant following Nest Hub picking up
strangers' camera feeds (Updated)
So-called "smart" security cameras have had some pretty dumb security
problems recently, but a recent report regarding a Xiaomi camera linked to a
Google account is especially disturbing. One Xiaomi Mijia camera owner is
getting still images from other random peoples' homes when trying to stream
content from his camera to a Google Nest Hub. The images include stills of
people sleeping and even an infant in a cradle. In the meantime, Google has
entirely disabled Xiaomi integration for Google Home and the Assistant while
it works out the issue with Xiaomi.
This issue was first reported by user /r/Dio-V on Reddit and affects his
Xiaomi Mijia 1080p Smart IP Security Camera, which can be linked to a Google
account for use with Google/Nest devices through Xiaomi's Mi Home
app/service. It isn't clear when Dio-V's feed first began showing these still
images into random homes or how long the camera was connected to his account
before this started happening. He does state that both the Nest Hub and the
camera were purchased new. The camera was purchased from AliExpress and noted
as running firmware version 3.5.1_00.66.
Video Player
00:00
00:18
Video showing a random still image received when trying to stream content
from the camera.
When attempting to access a video feed from his connected camera (as depicted
in the video above), instead of the expected local video feed, he's provided
a random, occasionally partly corrupted black and white still image from
another home. Among the eight or so examples initially provided to Reddit are
a handful of disturbingly clear images showing a sleeping baby, a security
camera's view of an enclosed porch, and a man seemingly asleep in a chair.
Two more images showing a clear view inside a home, including someone asleep
in a chair.
Dio-V also believes the content of the random still images being fed to his
Nest Hub, which contain Xiaomi/Mijia branded date/timestamps, depict a
different time zone than his own.
It's technically possible this could be an elaborate hoax, but the video
evidence is pretty damning. Whatever feed is trying to be accessed is clearly
something that is actually integrated with Google Home/Assistant, and the
fact that it's intermittently corrupted and showing still images rather than
the expected video is also pretty high-effort for a fake. It's also possible
these could be some sort of test images and he's inadvertently accessing a
debug mode/feed, among other potential explanations.
Google isn't taking any chances, though. We reached out to the company and
were provided with the following statement after our story was initially
published:
"We’re aware of the issue and are in contact with Xiaomi to work on a fix.
In the meantime, we’re disabling Xiaomi integrations on our devices."
We reached out for further confirmation that this would mean a blanket
disabling of all Mi Home product integrations or commands for the Assistant,
and we have confirmed that this is the case. Our own subsequent attempts to
use Mi Home integrated devices through Google Home/Assistant show that Google
has already disabled this functionality at the time of our update, and Dio-V
(the Reddit user with the original report) has confirmed for us that his
camera is no longer working on his Nest Hub.
We've reached out to Xiaomi for comment, as well as additional details
surrounding how an issue like this could occur, but the company did not
immediately respond.
This isn't the first time that smart home security cameras have has this sort
of problem before. Memorably, some used Nest cameras would remain linked to
an original owner's account, providing them a glimpse inside the new
purchaser's home. More recently, Wyze, who makes smart security cameras, also
recently suffered a "mistake," storing unsecured user data in a publicly
accessible manner and requiring all customers to pair/set up devices again.
UPDATE: 2020/01/02 10:49AM PST BY RYNE HAGER
Google says it's disabling Xiaomi integrations
A Google spokesperson has provided us with the following short statement:
"We’re aware of the issue and are in contact with Xiaomi to work on a fix.
In the meantime, we’re disabling Xiaomi integrations on our devices."
We have further confirmed and verified that this is a blanket disabling of
all Mi Home product integrations for Google Home and the Assistant.
Our coverage above has been updated with this information.
2. 內文:
Xiaomi camera is showing stills from other cameras on my Google home hub!
When I load the Xiaomi camera in my Google home hub I get stills from other
people's homes!!
簡單說
今天要是有人的GOOGLE 語音無法操作小米的任何智能居家設備
應該就是GOOGLE 因為小米的攝影機漏洞
讓整個MI HOME 無法連線 GOOGLE HOME
GOOGLE HOME 現在在新增硬體的部分 也找不到MI HOME 可以連線了
3.心得:
阿不是NEST MINI發表會還送了 YEELIGHT的燈泡給各大網紅開箱示範嗎??
怎麼才一個多月就結束連線服務了!??
作者: jerry85606 (Ku)   2020-01-03 12:02:00
難怪沒辦法控制小米插座
作者: homelife (SKY)   2020-01-03 12:41:00
這有點煩耶,就算有漏洞,也可以只擋掉攝影機就好了吧加上台灣現在也上市了,應該多少有些人家是以Google助理為主要方式來控制全家的小米燈泡與家電,這樣說封就封這些人家中一定突然變得超不方便,也不公告多久後會恢復還好我雖然有Home mini,但是用Apple Homekit當主力..
作者: sean0430 (NANA)   2020-01-03 14:34:00
剛試了買 nest mini 送的 yeelight 是正常的,但是小米官網買的是離線狀態的
作者: gunlun (lun)   2020-01-03 19:51:00
米家掃地機器人已無法透過nest聲控
作者: drinkblood (drinkblood)   2020-01-04 15:36:00
一陣子就會開了
作者: KevinYu0504 (KevinYu)   2020-01-06 14:51:00
在別處看到有人回報小米裝置已經恢復上線可以控制了?

Links booklink

Contact Us: admin [ a t ] ucptt.com