Google announced that Nest users will need to enroll in two-factor authentication starting in spring of 2020. After a few automated attacks resulting from stolen emails and passwords, Google implemented reCAPTCHA Enterprise in early January, which can detect automated attacks and prevent them automatically. Last December, the company began notifying users via email when someone logged into their Nest accounts. They also
- Scan the web for Nest passwords
- Automatically reset accounts when they believe there is suspicious activity
- Require that users change their device passwords from the defaults and ensure that the passwords aren’t easy for hackers to guess
- Migrated all Nest users to a Google account
- Created a Family account that lets users share their passwords securely.
Cory Scott, Google Nest’s Head of Security and Privacy, wrote in a recent Google blog post,
“Privacy and security are foundational to Nest’s mission to create a more helpful home…You want to feel safe in your home, and making sure our devices add to that sense of security is a responsibility we take very seriously.”
Nest’s Security Issues
In the past year, Nest has encountered several issues that compromised users’ cybersecurity and privacy. Last February, Google announced a previously undisclosed microphone in the Nest Guard, the base station of the Nest Secure security system. In August, a division of Cisco Security called Talos found vulnerabilities in the Nest Cam IQ Indoor. After finding a vulnerability in the weave binary, Talos contact Nest Labs and Weave, resulting in a software update from Nest.
In April, Nest addressed cybersecurity issues resulting from customers’ email addresses and passwords being easy to find online. Nest denied culpability, saying their system was not breached and blaming the issues on anonymous third parties. The company recommended that users enable two-factor authentication, which will be required as of spring 2020.
FAQs
Is Nest a good security system?
Nest is a good security system. Minimalist in it’s parts with impressive cameras, integrations with Google Assistant and Alexa, and flexible contracting, Nest Secure is one of the best home security systems of 2020.
Does Nest security call the police?
If you sign up for professional monitoring through Brinks Home Security with your Nest system, then they can call the police for you after verifying an emergency.
Does Nest Secure require a subscription?
Nest Secure doesn’t require a subscription. However, if you want more than three hours of cloud storage, you can pay $6 a month or $60 a year for 30 days or $12 a month or $120 a year for 60 days. In the same vein, you can self-monitor your system for free in the Nest app, but if you want 24/7 professional monitoring, it’s available for $19 a month if you sign up for a year or $29 a month if you sign up for a monthly subscription.
The post Nest Requires Two-Factor Authentication appeared first on Security Baron.
via Security Baron https://securitybaron.com/news/nest-two-factor-authentication/