topic Re: Security Flaw in Arlo Pro 4

Security Flaw

King_Wizard — Tue, 28 Nov 2023 01:51:39 GMT

So my neighbor connects to the cameras with the arlo station being off and not connected to internet

He tethers internet off my phone and I even deleted the arlo app

You can hear the cameras triggering and only thing I can do is keep my phone off

The router shows intense GB usage Daily

This is a huge problem and security issue

Basically anyone can steal your internet or look at your data.

You said the system is closed and secure and that is a lie

Is there a White Hacker Reward?

Your system is far from secure

How do I get my money back or how do i stop the phone tethering?

Twitter here I come

Re: Security Flaw

DannyBearAgain — Tue, 28 Nov 2023 05:56:45 GMT

Is this something the neighbor has told you or is this your analysis?

what model cameras and base/hub?

The base/hubs use a closed wifi connection that arlo equipment can only access.

some later camera models have the option to connect directly to your local wifi router modem and so bypass the base/hub completely.

regards the phone tethering issue, this would only work if you have a hotspot activated on the phone with guest permissions enabled to anyone.

Re: Security Flaw

King_Wizard — Tue, 28 Nov 2023 06:14:00 GMT

He is recorded through out the week clicking stuff on his pc by his window near the sink.

Do you guys wash dishes for 9 hours? Lol

and WIFI is weird and he is hovering always on my windows plus internet usage spikes when he is awake

Even the little icon lights up sometimes, saying someone is accessing your Arlo and i logged someone out before

I changed my password twice

How are they bypassing the hub and how are they connecting to wifi like how?

I even turned off all app access to arlo on router

Nothing is activated

I own the most expensive router and modem

Im also certified in Networking Cisco

soooooo I cant figure it out

Camera clicks and my phone signal drops

the only thing i could think of is when you are setting up the cameras with your phone, somehow it saves the phone data to the hub

so cameras somehow access my phone bc they arnt connected to router

no guest permissions and hotspot

Re: Security Flaw

DannyBearAgain — Tue, 28 Nov 2023 06:31:49 GMT

So I would suggest a process of elimination to identify the path he maybe using to access your internet.

as you have already disconnected the arlo base station, remove batteries from cameras and observe your router internet usage as before.

If you’re still getting abnormal usage try removing any other devices you have like iPad, printers, Comcast tv, Google Home hubs etc. these can operate hotspots without you knowing.

Another thing to check is the other wifi bands like 5ghz that people tend to forget about if you have a dual band router.

Re: Security Flaw

King_Wizard — Tue, 28 Nov 2023 06:35:41 GMT

I removed everything from router

My wifi has been off 2.4 and 5 and I do not broadcast the wifi name

still happens

Re: Security Flaw

StephenB — Tue, 28 Nov 2023 12:31:57 GMT

@King_Wizard wrote:

He is recorded through out the week clicking stuff on his pc by his window near the sink.

How do you know he is actually accessing the cameras???

The icon normally changes color whenever recording or motion detection occurs - that doesn't mean he is making a recording.

All you are saying is that the cameras are recording him, you are not really providing any evidence that he is accessing the cameras.

@King_Wizard wrote:

the only thing i could think of is when you are setting up the cameras with your phone, somehow it saves the phone data to the hub

so cameras somehow access my phone bc they arnt connected to router

No. The phone can access the cameras through the base, but cameras/base never access your phone. Notifications come through the Arlo Cloud.

The cameras of course will remain connected to the base even if the router is blocking the cloud connection (or if the ethernet is simply disconnected). Motion detection and local recording will continue even if the internet isn't working. But the cameras and base will be off-line in the app.

Have you tried disarming the cameras?

@King_Wizard wrote:

Camera clicks and my phone signal drops

Mobile or wifi? Do you mean totally drops, or slows down?

@King_Wizard wrote:

I even turned off all app access to arlo on router

What exactly did you do?

Block access to the arlo domain?
Disable all internet access for the base?
Something else?

Re: Security Flaw

King_Wizard — Tue, 28 Nov 2023 21:37:11 GMT

There is a camera directly on his windows, I mean like feet

I can see him, he just like stares at me all day lol

Arlo Balcony is the camera name if you wanna check it out

He is not a good person

He is always, always hovering when the internet is being weird

I was wrong about the icon thing, that is motion.

I found someone logged in on my device before and i logged them out.

I changed my password twice

I remove the physical wire from arlo base and power cord removed also

I did, that seems to work. Like if you disconnect them from the base and remove the wires

Mobile, slows down very significantly 3 bars to 1 or always 1

Blocked all app access to Arlo mean like anything with communications, entertainment, social media, and video communications.

Im only in wired mode currently with my pc

I disconnected all the devices 2 weeks ago bc someone was flicking my lights on or off

All smart bulbs have been removed and anything connected to wifi

wifi is off and has mac filters on to my pcs and tv only

So the only thing they can connect to and slow me down is the arlo system bc the wifi name broadcasts and can be seen

Re: Security Flaw

StephenB — Tue, 28 Nov 2023 22:13:25 GMT

@King_Wizard wrote:

Mobile, slows down very significantly 3 bars to 1 or always 1

I don't see how the Arlo base could affect your mobile signal strength. It's a completely different radio (2.4 ghz wifi). He could possibly be using a jammer of some kind.

Though I would suggest that it would be best not to set up a camera that looks through his windows.

@King_Wizard wrote:

bc the wifi name broadcasts and

That doesn't mean he can connect to it. The network is closed so only the cameras can connect to it, and the password/authentication needed to connect to it isn't known.