Google shutting down Xiaomi access to Assistant following Nest Hub picking up strangers' camera feeds (Updated)

[steven36]

So-called "smart" security cameras have had some pretty dumb security problems recently, but a recent report regarding a Xiaomi camera linked to a Google account is especially disturbing. One Xiaomi Mijia camera owner is getting still images from other random peoples' homes when trying to stream content from his camera to a Google Nest Hub. The images include stills of people sleeping and even an infant in a cradle. In the meantime, Google has entirely disabled Xiaomi integration for Google Home and the Assistant while it works out the issue with Xiaomi.

 

 

 

 

This issue was first reported by user /r/Dio-V on Reddit and affects his Xiaomi Mijia 1080p Smart IP Security Camera, which can be linked to a Google account for use with Google/Nest devices through Xiaomi's Mi Home app/service. It isn't clear when Dio-V's feed first began showing these still images into random homes or how long the camera was connected to his account before this started happening. He does state that both the Nest Hub and the camera were purchased new. The camera was purchased from AliExpress and noted as running firmware version 3.5.1_00.66.

 

When attempting to access a video feed from his connected camera (as depicted in the video above), instead of the expected local video feed, he's provided a random, occasionally partly corrupted black and white still image from another home. Among the eight or so examples initially provided to Reddit are a handful of disturbingly clear images showing a sleeping baby, a security camera's view of an enclosed porch, and a man seemingly asleep in a chair.

 

Dio-V also believes the content of the random still images being fed to his Nest Hub, which contain Xiaomi/Mijia branded date/timestamps, depict a different time zone than his own.

 

It's technically possible this could be an elaborate hoax, but the video evidence is pretty damning. Whatever feed is trying to be accessed is clearly something that is actually integrated with Google Home/Assistant, and the fact that it's intermittently corrupted and showing still images rather than the expected video is also pretty high-effort for a fake. It's also possible these could be some sort of test images and he's inadvertently accessing a debug mode/feed, among other potential explanations.

Google isn't taking any chances, though. We reached out to the company and were provided with the following statement after our story was initially published:

"We’re aware of the issue and are in contact with Xiaomi to work on a fix. In the meantime, we’re disabling Xiaomi integrations on our devices."

We reached out for further confirmation that this would mean a blanket disabling of all Mi Home product integrations or commands for the Assistant, and we have confirmed that this is the case. Our own subsequent attempts to use Mi Home integrated devices through Google Home/Assistant show that Google has already disabled this functionality at the time of our update, and Dio-V (the Reddit user with the original report) has confirmed for us that his camera is no longer working on his Nest Hub.

 

We've reached out to Xiaomi for comment, as well as additional details surrounding how an issue like this could occur, but the company did not immediately respond.

 

This isn't the first time that smart home security cameras have has this sort of problem before. Memorably, some used Nest cameras would remain linked to an original owner's account, providing them a glimpse inside the new purchaser's home. More recently, Wyze, who makes smart security cameras, also recently suffered a "mistake," storing unsecured user data in a publicly accessible manner and requiring all customers to pair/set up devices again.

 

Google says it's disabling Xiaomi integrations

 

A Google spokesperson has provided us with the following short statement:

"We’re aware of the issue and are in contact with Xiaomi to work on a fix. In the meantime, we’re disabling Xiaomi integrations on our devices."

We have further confirmed and verified that this is a blanket disabling of all Mi Home product integrations for Google Home and the Assistant.

Our coverage above has been updated with this information.

 

Source

[Sylence]

Xiaomi should ditch Google, just like Huawei did, and build their own set of apps and services so one company or country won't be able to rule them all or cut their access whenever they want.

 

[mkc21]

12 hours ago, Sylence said:

Xiaomi should ditch Google, just like Huawei did, and build their own set of apps and services so one company or country won't be able to rule them all or cut their access whenever they want.

 

 

I wouldn't use xiaomi if it weren't for them having Google apps.

[steven36]

16 hours ago, mkc21 said:

 

I wouldn't use xiaomi if it weren't for them having Google apps.

That's the problem even though Huawei had a good 2019 they expect  a bad 2020 .

 

Huawei's 2019 revenue to jump 18%, forecasts 'difficult' 2020.

https://www.reuters.com/article/us-huawei-tech-results/huaweis-2019-revenue-to-jump-18-forecasts-difficult-2020-idUSKBN1YY1JL

 

Huawei downfall for not having Google services and Apps not came yet  it will be this year   they can sell phones in China without them  because they never had Google apps because Google  is banned in China but outside of China fact is  Google maintains Android   other than people who are paranoid  about privacy wont buy phones without Google , So Huawei became niche like Linux desktop . It's like when Microsoft made Vista and Windows 8.1  the  decline in sales was not noticed tell after they failed to make any money latter on. it's not even been one quarter yet were new Huawei phones don't have Google yet. They really didn't have a choice in the matter.

 

Quote

The world’s  No. 2 manufacturer of smartphones, was all but banned by the United States in May from doing business with U.S. companies, preventing its access to technology like Google’s Android operating system.

 

Xiaomi if you live in the USA is like Huawei it is not even sold  so it dont even matter what happens to them in the USA  because you don't miss technology  you  never had . They do sell some Chinese smart phones in the USA  like One Plus and they sell very good. What i dont get  people cry when the USA ban stuff . But they never say nothing about all the stuff China has banned from the USA and all over the world. They more worried about getting a cheap smart phone than  censorship and human rights . One day all there ranting about things is going backfire on them and they will all be stuck with a censored internet were they can't freely speak . I't's almost like that now.  When more places decide to get a Firewall like China they want even be on the same internet as the rest of us without breaking the law.

[dMog]

hmmm.... i bet this has nothing do whatsoever with google or other app makers spying on us does it.... oh, wait a minute, it has everything to do with that.IF IT LOOKS LIKE A DUCK AND QUACKS LIKE A DUCK,  what could it possibly be but a duck

 

[steven36]

3 hours ago, dMog said:

hmmm.... i bet this has nothing do whatsoever with google or other app makers spying on us does it.... oh, wait a minute, it has everything to do with that.IF IT LOOKS LIKE A DUCK AND QUACKS LIKE A DUCK,  what could it possibly be but a duck

 

When  it comes to there services  they can ban who  they please with them .Google can spy on us because there really no laws  about it in the USA  yet other than California and the EU . Google only have  to put up enough smoke and  mirrors to make these  places happy and pay there fines that the way antitrust has always been .  Look at Microsoft  they been were Google  is now with antitrust issues and came out of  it and are worth way more now as a company than they was in 90s and 2000s  ..The 2010s  and the Cloud has been very good to Microsoft not only do they have lots of business on Windows  they have lots of customers  on Apple  , Linux  and hold goverment contracts . But   Google can get in serious trouble if they  let smartphone vendors  from  other countries spy on us using there services because they laws against that .