PSA: It seems the latest version of the Reolink Android app (v4.43.0.5.20240111) is capturing the phone’s clipboard when first opened, and again whenever the clipboard contents change and the app is brought into the foreground.

GrapheneOS reports, “Reolink pasted from your clipboard”. I don’t recall seeing this message on older versions of the software.

While network-accessible camera software has always posed a privacy risk, this is particularly concerning behaviour.

  • @[email protected]
    link
    fedilink
    English
    1110 months ago

    boo, and this is one of the few low cost camera systems I will recommend to non techie users.

  • @[email protected]
    link
    fedilink
    510 months ago

    Good thing I have frigate nvr setup and don’t need their app at all. This is super sad since these are my go to cameras. I will still buy them since I put them on a vlan and block all internet access. This is sad though 😕

  • @[email protected]
    link
    fedilink
    210 months ago

    Bad but expected given that they are Chinese based. I use several of their cameras but only after kepping them isolated from the Internet and segmented from the rest of my network. I only access the streams from my NAS which in turn access the camera streams from a dedicated NIC.