Google Nest Cam 2nd Generation (2023)
From Wiki-IoT
| Google Nest Cam 2nd Generation (2023) | ||
|---|---|---|
|
Security Grade
Calculator v1
|
Google Nest Cam (2nd Gen, 2023)
Brand: Google (Parent: Alphabet Inc) Category: Indoor/Outdoor security camera • Model / Gen: 2nd Generation GA01999-US Release Date: 2023-09-20 • Status: In sale Classification Date: 2025-10-20 • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Rare | [[1] https://support.google.com/googlenest/answer/9293598 [2] https://www.mandiant.com/resources/blog/nest-cam-cookie-hijack [3] https://www.ifixit.com/Teardown/Google+Nest+Cam+2nd+Gen+2023+Teardown/175814 π Proof] | UART pads require disassembly; no public back-door |
| Known vulnerabilities | Rare | [[1] CVE-2024-1392 (Matter PASE brute-force, fixed) [2] https://www.cve.org/CVERecord?id=CVE-2024-1392 [3] https://research.nccgroup.com/2024/03/12/technical-advisory-matter-pase-pin-bruteforce/ π Proof] | Only 1 medium-severity CVE |
| Prior attacks | Rare | [Same CVE-2024-1392; Mandiant reported only cookie-hijack π Proof] | No large-scale exploitation |
| Updatability | Very common | [[1] https://support.google.com/googlenest/answer/7362441 [2] Auto-patch cycle β€45 days π Proof] | Forced OTA, cannot be disabled |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Full | [[1] https://developers.google.com/nest/device-access [2] Google Account OAuth 2.0 & Matter pairing π Proof] | 3rd-party only via OAuth |
| Communications | Encrypted with up-to-date encryption | [[1] TLS 1.3 + AES-256-GCM [2] https://support.google.com/googlenest/answer/9293598 π Proof] | Video stream additionally SRTP |
| Storage | Encrypted with up-to-date encryption | [[1] On-device: AES-256-XTS (Edge storage) [2] Cloud: AES-256-GCM π Proof] | Keys stored in Titan M2 |
| Category Score | Score: 1 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Full | [[1] https://myaccount.google.com/ [2] Family group & member tiers π Proof] | One-click delete all cam data |
| Authentication | Secure | [[1] 2-Step Verification mandatory since 2021 [2] https://support.google.com/accounts/answer/185839 π Proof] | FIDO2/U2F security keys supported |
| Brute-force protection | Exist | [[1] 5 wrong attempts β 15 min lockout [2] https://support.google.com/accounts/answer/2407945 π Proof] | Exponential backoff |
| Event logging | Access event logged | [[1] Google Home App β Settings β Events history [2] 30-day JSON export π Proof] | Motion, Sound, Person events |
| Passwords | Require change after setup with complexity requirements | [[1] Sign-up β₯8 chars, mixed-case + symbol [2] https://support.google.com/accounts/answer/32040 π Proof] | No default weak creds |
| Category Score | Score: 1 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | Cast OS 3.0 (Linux 5.15) (Companion App: Google Home App) |
| Hardware (CPU / GPU) | CPU: • GPU: |
| Memory & Storage | Memory: • Storage: |
| Power, Battery & Charging | Battery: • Power: • Charging: |
| Display & Camera | Display: • Camera: |
| Sound & Connectivity | Sound: • Connectivity: |
| Physical (Dimensions & Mass) | Dimensions: 8.9 Γ 6.4 Γ 6.4 cm • Mass: 98 g |