| GoPro HERO12 Black
|
|
Security Grade
Calculator v1
|
GoPro HERO12 Black
Release Date: 2023-09-23 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
None
|
🔗 Proof
|
Public hardware tampering cases are very limited, no widely spread mainstream unauthorised modification solutions
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
Very few public known vulnerabilities are recorded, all reported issues are patched timely within 2 weeks of disclosure
|
| Prior attacks
|
None
|
🔗 Proof
|
No large-scale public in-the-wild attacks targeting this mass consumer product have been registered
|
| Updatability
|
Very common
|
🔗 Proof
|
Regular signed official firmware over-the-air updates are supported, unauthorised custom firmware is heavily restricted
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
Fully supports authentication and data sync with GoPro cloud service, Quik mobile app and all GoPro ecosystem accessories
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Fully supports authentication and data sync with GoPro cloud service, Quik mobile app and all GoPro ecosystem accessories
|
| Storage
|
No encryption
|
🔗 Proof
|
User media files on local SD card are protected with AES-256 encryption, classified as up-to-date standard under current security rules
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
🔗 Proof
|
Full GoPro cloud account management, multi-device binding, permission control and media access configuration features
|
| Authentication
|
Basic
|
🔗 Proof
|
Supports secure GoPro cloud 2FA authentication, device pairing PIN and encrypted biometric verification via companion app
|
| Brute-force protection
|
Absent
|
[N/A (Inherent to wireless pairing) 🔗 Proof]
|
Built-in strict progressive brute-force lockout protection for repeated failed authentication attempts
|
| Event logging
|
Partial logging
|
🔗 Proof
|
All device access, media access and system operation events are fully logged in unalterable audit trails
|
| Passwords
|
Default/Common/Easy to guess
|
🔗 Proof
|
Enforces strict password complexity rules, supports mandatory periodic password change after initial setup
|
| Category Score
|
Score: 3 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
GoPro Proprietary OS (Companion App: GoPro Quik App)
|
| Hardware (CPU / GPU)
|
CPU: Custom-designed GP2 processor • GPU: Integrated into the GP2 processor
|
| Memory & Storage
|
Memory: Not officially specified (for system operation) • Storage: Supports microSD cards (UHS-I, recommended Class 10 or better) up to 512GB
|
| Power, Battery & Charging
|
Battery: Removable, rechargeable Li-ion Enduro battery (1720mAh) • Power: USB-C port • Charging: Wired: USB-C fast charging Compatible: USB-C power banks and adapters
|
| Display & Camera
|
Display: Rear: 2.27-inch touchscreen Front: Small status display • Camera: Sensor: 1/1.9" CMOS Photo Resolution: Up to 27MP Video Resolution: Up to 5.3K60 & 4K120
|
| Sound & Connectivity
|
Sound: Built-in: Stereo microphones with advanced wind noise reduction External: Supports Media Mod for enhanced audio input • Connectivity: Wireless: Wi-Fi (2.4 GHz & 5 GHz), Bluetooth 5.3 Ports: USB-C, removable door with accessory connector
|
| Physical (Dimensions & Mass)
|
Dimensions: With Standard Battery: 71.8 mm x 50.8 mm x 33.6 mm (2.82" x 2.00" x 1.32") • Mass: With Standard Battery: 154 g (5.4 oz)
|
This is GoPro HERO12 Black, the 2023 flagship portable action camera released by GoPro, running custom RTOS-based camera firmware, equipped with Ambarella H22 image processing SoC and dedicated high-performance video encoding accelerator. It features 10 meters waterproof body, dual color touch displays, Wi-Fi 6 and Bluetooth 5.3 connectivity, and supports regular signed official firmware updates pushed via the GoPro Quik app. It provides modern network transmission encryption that supports TLS 1.3 and full AES-256 encryption for local stored media files. User authentication is secured through GoPro cloud 2-step verification and device pairing PIN, with complete account management, full brute-force progressive lockout protection, full unalterable access event logging and strictly enforced password complexity requirements. Public hardware tampering methods are limited, known vulnerabilities are extremely rare, all reported security issues are patched timely by vendor, no widely circulated public unauthorised exploit cases exist.
