Cybersecurity Policy Report, Rubio, Starks Raise Concerns About Chinese Video Doorbells, (Mar 11, 2024)

By Lynn Stanton

Sen. Marco Rubio (R., Fla.) has written to FCC Chairwoman Jessica Rosenworcel to urge her agency to investigate reports that major retailers, including Temu, SHEIN, Amazon, Walmart, and Sears, sell video doorbells from Chinese manufacturer Eken Group Ltd., “despite reports of serious security vulnerabilities” and a lack of FCC equipment authorization identification (ID) numbers.

Meanwhile, FCC Commissioner Geoffrey Starks has written to those same five online retailers to ask about their processes for ensuring that products they sell comply with FCC authorization requirements, as well as how they vet products that pay for sponsored listings or that are labeled as “Amazon’s Choice: Overall Pick,” for example. He asked for responses by March 22.

FCC spokesperson Paloma Perez said, “The companies highlighted in these letters are already subject to an ongoing investigation by the Enforcement Bureau.” The agency declined to provide further information about the ongoing investigation.

In his letter to Chairwoman Rosenworcel, Sen. Rubio said, “Eken is a Shenzhen-based manufacturer in the People’s Republic of China (PRC). It produces inexpensive electronic devices typical of the ‘fast technology’ trend common among PRC firms. These devices often sacrifice essential security protocols for cost advantage, a fact recently proven by testing engineers who successfully hacked an Eken video doorbell remotely. Consumers use the Aiwit app, owned by Eken, to access the video feeds from their doorbells. However, Eken fails to encrypt any data transmitted from the doorbell to the app via the internet. This appalling security flaw exposes users’ home internet protocol (IP) addresses and WiFi network names. Criminals, stalkers, and even foreign intelligence operatives can easily exploit this vulnerability to monitor the comings and goings of individuals from a home.”

He emphasized that by failing to comply with FCC equipment authorization rules, the Eken devices might be illegal for import, marketing, or use in the U.S.

“Unfortunately, these facts have not stopped major retailers from carrying Eken’s products. It is unsurprising that Temu, a serial Chinese trade abuser, carries Eken’s products. However, Chinese companies are not the only ones pushing Eken’s products. Amazon has endorsed them with the ‘Amazon’s Choice’ and ‘Overall Pick’ badges, thus misleading and endangering their customers. Simply being stocked by these retailers gives Chinese fast-technology companies the appearance of credibility. Americans deserve to shop securely with confidence that they are not purchasing illegal products that compromise their privacy,” Sen. Rubio added.

In a statement, Commissioner Starks said, “Consumers have embraced the internet of things to make their lives better to the point that a large majority of American homes now have at least one or two IoT devices. With that reach and that penetration, these devices ought to be secure. That’s why I was angered to read recent reports showing that many video doorbells sold on some of the largest online marketplaces in the world lack even basic security measures and leave buyers exposed to chilling privacy invasions and network intrusions.

“Just as concerning were reports suggesting that some of these products violated the FCC’s equipment authorization rules, which protect the public from risky products entering our wireless supply chain. The Biden Administration’s Cyber Trust Mark program — which the FCC plans to vote on next week — offers a strong path forward by helping consumers make smart buying decisions and incentivizing manufacturers and retailers to take IoT cybersecurity seriously. Working together, we must find better ways to stop risky and unlawful products from entering the commerce stream — and from seeing their sales irresponsibly boosted when they are listed online,” he added.

News: FederalLegislation DataSecurity DataPrivacy