Google has recently disabled Xiaomi camera integration with its Google Nest Hub after a user reported that he was able to view a stranger’s home through their device. The company has informed that it has fixed the issue, but Nest integration remains suspended until the root cause has been completely solved.
The Reddit user posted images that came from his Xiaomi Mijia 1080p Smart IP security camera when he tried to stream from the camera to a Google Nest Hub. The still images of strangers included a man sleeping in a chair, a security camera view of a porch, and a sleeping baby.
It appears the issue doesn’t reside in Google products; instead, it could be a bug in the way Xiaomi implemented the connection between its smart cameras and Nest Hub. The camera’s owner states that the issue was created using a Xiaomi Mijia camera running on firmware version 3.5.1_00.66.
Since the Reddit post came to light, “our team has since acted immediately to solve the issue and it is now fixed,” the Xiaomi spokesperson told Threatpost. “Upon investigation, we have found out the issue was caused by a cache update on December 26, 2019, which was designed to improve camera streaming quality.”
“This only happens in extremely rare conditions,” the spokesperson says. “In this case, it happened during the integration between Mi Home Security Camera Basic 1080p and the Google Home Hub with a display screen under poor network conditions.” Xiaomi says it has communicated and fixed the issue with Google and has also suspended this service “until the root cause has been completely solved, to ensure that such issues will not happen again.”
Google said on Friday that it was continuing to work with Xiaomi to resolve the issues for all users.
Xiaomi other breaches
It isn’t the first time home security cameras have come under the spotlight in recent days. On December 30, smart camera maker Wyze Labs confirmed databases containing millions of customers’ details had been exposed.
Secure Your Organization’s Mind with Securemind.se