From Doorbell to Home Network: Hacking Eufy's Hidden Wi-Fi
From your doorbell to your home network
A security researcher reverse-engineers the Eufy Security Video Doorbell ecosystem, revealing how to jam its hidden network, crack the soundwave sync protocol, and extract decrypted credentials from a memory dump. The article details the process of finding the hidden OCEAN_XXXXXX network, deauthenticating the doorbell, and intercepting the pairing process to gain access to the home network.
Because the doorbell (and I guess other Eufy devices) must communicate to internet at some point, the Homestation acts as a gateway and if you connect to that hidden network you can browse freely. Also it gives you access to any other element in the network (for example, your router web interface).
- baw-bag
Does anyone ever wonder why a doorbell needs to be connected? I do, so I don't have one. Diminishing returns by design? I've never been like "oh I am glad my doorbell is connected to my network". Wondering what marketing I didn't see (and fall for).
- kennywinker
This is just one reason I prefer zigbee for smarthome devices. There is a protocol-level isolation between them and my home network. Really sad to see zigbee devices getting rarer
- Fnoord
This is why my doorbell is on a separate VLAN, without internet access.