Video doorbells, WiFi signal jammers?

Scam

Scam

Scam

Soldato
Joined
20 Oct 2002
Posts
18,585
Location
London
Just had someone on our local FB group mention an episode of Rip Off Britain ( :p ) where it was explaining how thieves are using de-auther/signal jamming devices to knock Ring doorbells off WiFi and enable them to steal stuff etc.

I found this article; https://www.bbc.co.uk/programmes/ar...urity-flaw-in-amazon-s-ring-doorbells-exposed

Thoughts? Do these things actually work? I have a Reolink WiFi doorbell but completely accept it is a deterrent and a helpful tool, not a de facto security system.
 
Sounds like it is indeed a problem, although guessing not that prevalent. If you’re worried about it, you should look at replacing your bell with the POE Reolink. I’ve been considering this myself for quite some time now.
 
Last edited:
Denying rogue APs has been a requirement of businesses for a long time. That tech has just manifested in a "nasty" way.

I mean the article itself shows someone with a hoody/bala on; so the cam is pretty useless other than to triangulate timing. And the police DGAF anyway.
 
Diggsy said:
Sounds like it is indeed a problem, although guessing not that prevalent. If you’re worried about it, you should look at replacing your bell with the POE Reolink. I’ve been considering this myself for quite some time now.
Click to expand...
Yeah I'm not worried. If someone wanted to nick a parcel off our doorstep they'd just stoop down, cover their face and be in and out without us getting a clear picture of them. There's not much you can do. The only improvement I will be making is to build a small homeserver to FTP my recordings to, as they currently just sit on an SD card on the doorbell itself. So if someone is being naughty and decides they need to take the evidence with them I'd be SOL.

POE was going to be my suggestion on the FB group, do Ring even offer that? I know most non-techies think Ring are the only ones out there.

dlockers said:
Denying rogue APs has been a requirement of businesses for a long time
Click to expand...
Sorry, what do you mean by this? Is it the denying a rogue AP that causes the network to crash out? Does hiding the SSID work? One article I read specified 2.4GHz networks only too?

My friend who works in cyber security did show me such a device (which did so much more), where it can kick a device off the network and get them to join a faux-duplicate network. Similar thing by the sounds of it.

EDIT: Wifi 6 seems to have protection against this too? :confused:
 
Last edited:
Scam said:
Sorry, what do you mean by this? Is it the denying a rogue AP that causes the network to crash out? Does hiding the SSID work? One article I read specified 2.4GHz networks only too?

My friend who works in cyber security did show me such a device (which did so much more), where it can kick a device off the network and get them to join a faux-duplicate network. Similar thing by the sounds of it.

EDIT: Wifi 6 seems to have protection against this too? :confused:
Click to expand...

Wi-Fi deauthentication attack - Wikipedia

en.wikipedia.org en.wikipedia.org
 
dlockers said:

Wi-Fi deauthentication attack - Wikipedia

en.wikipedia.org en.wikipedia.org
Click to expand...
Yeah got it. I don't have time to read up on it in detail but I wanted to post something helpful for the FB group.

Sounds like less deauthers can attack 5GHz devices don't you think? I was also just browsing a reddit thread where someone was saying that locally recording devices may not be affected, as-in the device will still record to the SD card :confused:
 
Scam said:
Yeah got it. I don't have time to read up on it in detail but I wanted to post something helpful for the FB group.

Sounds like less deauthers can attack 5GHz devices don't you think? I was also just browsing a reddit thread where someone was saying that locally recording devices may not be affected, as-in the device will still record to the SD card :confused:
Click to expand...
You could jam any WiFi network frankly. I would need to make a good guess about which doorbell is connected to which network - I think the BBC article is a bit sensationalist tbc. I could just stick a bit of tape over the lens. Also the Amazon response was right - on what basis could they say it was WiFi jamming? :S All the evidence the bloke has what that the event wasn't caught on camera.

Your guy is theoretically right tho - local recording should be unaffected.
 
I bought a PoE doorbell, ran all the cabling for it. I'll fit it one day. I don't view these as security devices, it's just for screen who I open the door to :D
 
dlockers said:
I would need to make a good guess about which doorbell is connected to which network - I think the BBC article is a bit sensationalist tbc.
Click to expand...
Oh yes it definitely is hence why I wanted to wade into the discussion. I'll regret it I'm sure as it's the local equivalent of Mumsnet :p But yeah god point re. the network, how does the attacker even know what wifi network is for each property? Would take some more legwork, although I'm sure it's possible. Hard in an area like mine with very small terraced houses that are like 5m wide...
Trifid said:
I have also set a routine to announce on my Google home if my cameras go offline.
Click to expand...
That's cool. How did you do that? Sounds like a good idea for my Reolink doorbell.
GeX said:
I don't view these as security devices, it's just for screen who I open the door to :D
Click to expand...
Oh yes. Your average joe needs to realise that a single Ring wifi doorbell is not equivalent to a proper security system!
 
So jam and deauth are two different things.

I can jam the frequency by simply creating interference on the same channel that the doorbell is using.

deuath is as simple as my device pretending to be the access point and telling a client, you're no longer authenticated to me, go away, the client will then go oop okay bye!

Deauthentication is possible on both 2.4GHz and 5GHz spectrums, but not 6GHz. 6GHz mandates MFP (Management Frame Protection).

MFP prevents all de-auth.
 
Hyburnate said:
So jam and deauth are two different things.

I can jam the frequency by simply creating interference on the same channel that the doorbell is using.

deuath is as simple as my device pretending to be the access point and telling a client, you're no longer authenticated to me, go away, the client will then go oop okay bye!

Deauthentication is possible on both 2.4GHz and 5GHz spectrums, but not 6GHz. 6GHz mandates MFP (Management Frame Protection).

MFP prevents all de-auth.
Click to expand...
I should expand and say many devices may not support MFP.

2.4 and 5 can support MFP but only from Wi-Fi 6.

If anyone has any questions quote me, I love Wi-Fi lol
 
Last edited:
Scam said:
Oh I know, I don't have my Reolink talking to Google Home yet but I'm not seeing aa start for when device goes offline?
Click to expand...

This is the bit that detects its online state.

starters:
type: device.state.Online # For devices that support online and offline state, and/or report online and offline state. # Camera offline
device: Front Door camera - Front Door
state: online
is: false
 
Trifid said:
starters:
type: device.state.Online # For devices that support online and offline state, and/or report online and offline state. # Camera offline
device: Front Door camera - Front Door
state: online
is: false
Click to expand...
Oh is that the Google Automation scripting? I’ve not played with that yet.

Any good guides out there? Documentation was pretty limited when it was first released.
 
You must log in or register to reply here.
Back
Top Bottom