Ring hopes new encryption tech will ease surveillance fears around its home

General News
1

Ring says TAKE provides a similar level of protection as end-to-end encryption, where sensitive data is effectively scrambled when traveling between one trusted endpoint (like a camera) and another (like a customer’s phone) and no outsider can access it. But the company says the new technology is more effective for the multi-device, multi-user configurations used by many Ring customers.

Ring will roll out the new encryption as the default security setting on all of its cameras starting in September.

The company says it will retain end-to-end encryption as an option starting in September.

2 Likes
2

Hilarious

1 Like
3

It’s end to end encrypted! They encrypt it from their camera and safely decrypt on their end to hand over to the police without warrants.

5 Likes
5

What is the difference between TAKE and E2EE?

6

Summary
Throw Away the Key Encryption (TAKE) is rolling out gradually as the new default encryption for all Ring customers. It gives you
even greater control over how and when Ring can process your videos, while keeping the features you already use. With TAKE, your
videos are encrypted with keys that change frequently; Ring can only unlock its copy of those keys within a secure enclave. Ring’s access
to the enclave is restricted by access controls, cryptography, and hardware isolation, so that Ring can only use keys to power the features
active on your account. Ring permanently deletes its copy of your keys after 24 hours. If you later enable a feature that needs to process
older videos, your Ring app can temporarily provide the keys to power that feature, and Ring deletes them again afterward.

End-to-End Encryption (E2EE) continues to be available to customers as an option. In this optional mode, Ring does not have access
to decrypted content, even temporarily. Ring stores only encrypted video and cannot decrypt it; only you hold the keys needed to decrypt
video. Shared Users and features that require Ring to process video, such as Video Search and Video Description, are not available under
E2EE. Features that do not require Ring to process video, such as Live View, event playback, and 24/7 recording, keep working.

7

Hmmm, I’m gonna have to say their encryption standards aren’t the problem I have with them.

1 Like
8

So the most private option is OFF by default, while the less private options (with more features!) allow Ring access for 24 hours, subject to “access controls” that Ring deems appropriate. Aren’t they the ones selling access to the videos in the first place? Are the most recent 24 hours the most valuable? If they can request for keys whenever users need the features, why does Ring keep any keys at all? Is this right?