Wink hub gave previous user Nest camera access to new owner’s footage

Integrating Nest cameras with Wink’s hub gave a previous owner access to footage from a new owner’s Nest camera, even if the previous owner deleted the camera from their account. Google has released a fix for the security issue.

Nest Cam Indoor

The previous owner was only able to view the images as stills via the Wink hub’s service, The Wirecutter reports. This is possible because the Wink hub is directly linked to a Nest camera and that link only disappears if the user removes the camera in Wink’s settings.

The security issue surfaced in the Wink user group on Facebook. The only solution was for Wink users to disconnect from the camera in Wink’s software. Google has now implemented a fix and it works, reports The Wirecutter. As a result, Wink users will no longer be able to access footage from new owners once they have resold a Nest Cam.

Wink is part of the Works With Nest program, which ends August 31. According to Nest, such automated actions will soon have to run via the Works with Google Assistant platform. Home automation developers are advised by Nest to integrate their devices or services with the Works with Google Assistant platform. Google already mentioned privacy reasons as an argument to stop Works With Nest.