Google last week disabled all Xiaomi integrations on Nest Hub after learning that some users could access other people’s camera feeds.
The issue was initially reported on January 1, 2020, when a user posted on Reddit, revealing that their Nest Hub was able to access feeds from other people’s Xiaomi cameras. The user also posted screenshots to prove the discovery.
Although the Mi Home Security Camera Basic 1080p was found at fault, Google decided to disable all Xiaomi integrations on its devices. As it turned out, only the Mi Home Security Camera Basic 1080p was found to be at fault.
“We’ve been working with Xiaomi and we’re comfortable that the issue was limited to their camera technology platform,” a Google employee posted in a thread on the company’s support website.
After a thorough investigation, Google decided to re-enable Xiaomi device integrations, but left camera streaming disabled.
“We will not reinstate camera functionality for Xiaomi devices until we are confident that the issue has been fully resolved. We’ll keep you updated with information as more becomes available to share,” Google said.
The issue was apparently caused by a cache update on December 26, 2019, and only occurred in specific conditions. Around 1000 users are believed to have been affected by the bug.
Although Google has re-enabled Xiaomi integration on Nest Hub, many users are still complaining of failed attempts to reconnect their devices, comments on Google’s support website reveal.
Related: Google’s Nest Hub Has a Microphone It Forgot to Mention
Related: Bug Hunters Earn $195,000 for Hacking TVs, Routers, Phones at Pwn2Own
Related: Zero-Day Exploits Earn Hackers Over $500K at Chinese Competition

More from Ionut Arghire
- Google Leads $16 Million Investment in Dope.security
- Critical WooCommerce Payments Vulnerability Leads to Site Takeover
- PoC Exploit Published for Just-Patched Veeam Data Backup Solution Flaw
- CISA Gets Proactive With New Pre-Ransomware Alerts
- CISA, NSA Issue Guidance for IAM Administrators
- Cisco Patches High-Severity Vulnerabilities in IOS Software
- ‘Nexus’ Android Trojan Targets 450 Financial Applications
- ‘Badsecrets’ Open Source Tool Detects Secrets in Many Web Frameworks
Latest News
- Intel Co-founder, Philanthropist Gordon Moore Dies at 94
- Google Leads $16 Million Investment in Dope.security
- US Charges 20-Year-Old Head of Hacker Site BreachForums
- Tesla Hacked Twice at Pwn2Own Exploit Contest
- CISA Ships ‘Untitled Goose Tool’ to Hunt for Microsoft Azure Cloud Infections
- Critical WooCommerce Payments Vulnerability Leads to Site Takeover
- PoC Exploit Published for Just-Patched Veeam Data Backup Solution Flaw
- CISA Gets Proactive With New Pre-Ransomware Alerts
