Reddit: I bought and returned a set of Arlo cameras. I can now watch the new owner.

[eknkc]

Coudn't find if this gem has been addressed / discussed here:

https://m.reddit.com/r/privacy/comments/4ortwb/i_bought_and_returned_a_set_of_wifi_connected/

Were there any updates on this?

[TomMac]

Last i had heard, it was related to the USED device not being unregistered and resold....

Netgear statement was they were locking down that problem of not unreg'ing a base unit before transfer.

Freeky, but prob rare.  Not as many as old hard drives outt here with personal data... lost count of how many used computers I've gotton where the hard drives still had data when deep searched

[nngnng]

Just another thumb up for Netgear- How can we trust Netgear......

[JamesC · Accepted solution]

NETGEAR has previously informed our resellers that retailers are not to resell cameras that have been returned, so the Arlo camera system in this instance was resold without our authorization. When setting up a previously owned camera it is advised that all Arlo cameras be reset from the original base station before the base station changes ownership, which will clear connection with any previously existing account. The configuration for the cameras need to be cleared as the settings may contain the associated account information of the previous owner. NETGEAR is aware of this concern and takes the security of our customers seriously.

[eknkc]

Why does setting up a new installation leaves an older one intact? It should just remove old account association and associate the cameras to the new acount.

Even if you say these are the case, how would I know that my cameras were not returned to a reseller that did not follow your protocol and repackaged it? At least, it should notify that there are other account associations.

[arlo_dontbuyit]

This has not been resolved: https://www.reddit.com/r/privacy/comments/4ortwb/i_bought_and_returned_a_set_of_wifi_connected/d57mp...

I bought an Arlo Q and returned it when I learned of the security/privacy issue on reddit.

I bought directly from Amazon.com LLC and returned it to them. Apparently they also do not listen to Netgear's recommendation that they should not resell the device.

Netgear's response is unacceptable. It should not be the burden of the end user or the retailer to prevent a person from seeing someone else's private videos.

When an Arlo gets registered to a new account, it should *immediately* get removed from ALL previous accounts. That's the only way to make sure the camera is secure.

As of now, I can see the new owner's videos in my library! It is insane that Netgear allows this to happen.

I'm a huge fan of Netgear, but this is terrible. Please fix this ASAP.