To receive Mozilla’s minimum security standard badge, the products must use encryption, have automatic security updates, enact bug bounty programs to help report vulnerabilities and require users to change the default password.
Here are the products that didn’t meet Mozilla’s minimum security standards … and the two that scored the highest:
Mozilla said the company doesn’t have a “great track record for securing customer data or hiring experienced security engineers,” and the researchers couldn’t determine if Ring’s products use secure encryption. Mozilla also said that Ring’s search for a “head of facial recognition research” contradicts the company’s claim that it doesn’t use the technology.
“All in all, this is a security video camera that raises just too many questions about privacy and security, in our opinion,” Mozilla said in a statement.
Wemo Wifi Smart Dimmer
“Security researchers discovered that the Belkin Wemo Insight Smart Plug is still at risk for attack even though security vulnerabilities had been identified and disclosed over a year ago,” Mozilla researchers said, adding that it could affect the entire line of Wemo smart home devices.
Artie 3000 Coding Robot
“And while unlikely, it’s possible some terrible person could hack in, diffuse your pet’s aromatherapy scents in the middle of the night causing a sneezing fit which leads to insomnia which causes you to fall asleep at the wheel on your way to work the next morning and you wreck your car,” Mozilla said in a statement.
Litter Robot 3 Connect
OurPets SmartScoop Intelligent Litter Box
Although Nintendo doesn’t share user data with third parties, some third-party games for the Switch “might be collecting and sharing your data.”
“To think, a speaker simply built to play music and not listen to you all day long. Crazy!,” Mozilla said in a statement.