Google had temporarily disabled Xiaomi’s camera integration with its Google Nest Hub when a Netherland based user named “Dio-V,” loaded the live feed of his Xiaomi camera, and he found something weird. He was getting some still video feeds in his camera from other users, which also had installed Xiaomi’s smart camera in his home.
Internet-connected devices have been one of the best development which eases our life, but these IoT devices have been vulnerable to many security flaws which could leak user’s information.
Dio-V reported the incident on Reddit along with footage to say the severe security flaw he posted the comment “When I load the Xiaomi camera in my Google home hub, I get stills from other people’s homes!!”
A Google employee has commented on that, “Hey there u/Dio-V sorry to hear you’re both experiencing this. I’d love to investigate further what’s happening.”
After getting to know about the flaw, Google had temporarily disabled Xiaomi integration with Google Nest and Assistant.
Google said that “We’re aware of the issue and are in contact with Xiaomi to work on a fix. In the meantime, we’re disabling Xiaomi integrations on our devices.”
On this flaw, Xiaomi commented, “Upon investigation, we have found out the issue was caused by a cache update on December 26, 2019, which was designed to improve camera streaming quality. This has only happened in extremely rare conditions.”
Xiaomi also said this issue would not happen if the Mijia 1080p Smart IP Security Camera were connected with Xiaomi’s Mi Home app. However, Xiaomi communicated with Google and fixed the issue, and Google has suspended the service until the root cause has been solved.
Yesterday a google employee commented on the Reddit, “We’re re-enabling Xiaomi device integrations for everything but camera streaming after necessary testing is completed. We will not reinstate the camera functionality for Xiaomi devices until we are confident that the issue has fully resolved.”
