(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
| Ring Video Doorbell 3
|
|
Security Grade
Calculator v
|
Ring Video Doorbell 3
Release Date: 2020-04-01 • Status: End of sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
None
|
🔗 Proof
|
No hardware tampering reports
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
Main issues are internal access, not technical CVEs
|
| Prior attacks
|
Very common
|
🔗 Proof
|
FTC case: employees viewed thousands of user videos; contractors had unrestricted access
|
| Updatability
|
Very common
|
🔗 Proof
|
Amazon pushes regular firmware updates
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
Encrypted with up-to-date encryption
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
TLS in transit; E2EE rolled out later
|
| Storage
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Cloud storage encrypted but accessible by staff
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
🔗 Proof
|
Amazon account system
|
| Authentication
|
Basic
|
🔗 Proof
|
2FA available but internal access controls were severely lacking
|
| Brute-force protection
|
Exist
|
🔗 Proof
|
Amazon account rate limiting
|
| Event logging
|
Partial logging
|
🔗 Proof
|
Limited user-facing logs, internal access was unmonitored
|
| Passwords
|
Require change after setup
|
🔗 Proof
|
User sets Amazon password
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Embedded (Companion App: Ring)
|
| Hardware (CPU / GPU)
|
CPU: • GPU:
|
| Memory & Storage
|
Memory: • Storage:
|
| Power, Battery & Charging
|
Battery: • Power: • Charging:
|
| Display & Camera
|
Display: • Camera:
|
| Sound & Connectivity
|
Sound: • Connectivity:
|
| Physical (Dimensions & Mass)
|
Dimensions: • Mass:
|
The Ring Video Doorbell 3 has one of the worst documented privacy records in consumer IoT. The FTC charged Ring in 2023 with allowing employees and contractors unrestricted access to customer videos — one employee spent months viewing thousands of recordings of female users in private spaces. Ring settled for $5.8 million. Mozilla's Privacy Not Included project consistently rates Ring negatively: no local storage option, undisclosed app trackers, and controversial law enforcement partnerships. The device auto-enrolls users into Amazon Sidewalk mesh network. While Ring has rolled out end-to-end encryption recently, the historical insider abuse and cloud-only architecture make this a high-risk device. Overall risk is high due to documented privacy failure
