The ADT technician did this simply by adding his personal email address to ADT Pulse accounts - Pulse lets customers check their security cameras remotely. He claimed he had to add himself to acct to test security system, but other times he simply added without telling customers
ADT is facing three federal lawsuits so far over this for allegedly failing to “implement adequate procedures that would prevent non-household members from adding non-household email addresses" to the customer accounts.
I see a lot of people taking issue with Buzzfeed's use of "hack" in the headline of this story. Yeah, not technically a hack. But under the CFAA, this is unauthorized access to the camera feed, or exceeding authorized access, so in legal terms it qualifies, of not technical terms
You can follow @KimZetter.
Tip: mention @twtextapp on a Twitter thread with the keyword “unroll” to get a link to it.

Latest Threads Unrolled:

By continuing to use the site, you are consenting to the use of cookies as explained in our Cookie Policy to improve your experience.