EyezOn Forum

Well, I guess this explains why my 5 zone followers stopped working the other day. Like you guys, it has been this way since I looked into buying this product a couple of years ago. The multiple zone followers and free email notification was the NUMBER ONE reason I bought this product and not others ...

Understand that this problem exists because you don't want people to find out your "hash". You are trying to obscure your "hash" number. The problem with obsurity is that it does NOT make a system secure. Even if eyes-on emails securely OR presents the mobile url to you on-line via a TLS protected ...

Unfortunately I'm Honeywell ... so no TPI right now.

It seems several "industry best practices" are not being followed. Even if they sent my mobile URL in an encrypted e-mail, that is just "security through obscurity" which is NOT security. I can probably write a perl script in the next ten minutes to randomly guess at the mobile URL "hash" number ...

The mobile site does NOT ask you to login. If someone can guess the URL string or write a script to guess the URL ... they will be able to monitor my alarm system and see if anybody is home and if the system is armed!!!! Heck the script kiddy next door that sniffs the cable modem line or any proxy ...