Gonçalo Magalhães

“Everything has flaws. What matters is what a flaw gets you, and here it gets you private images of people inside their own home. So the question is not what the manufacturer intends but what the design allows when something goes wrong. [...] The cloud service and the update channel are the two worth worrying about, because compromising either one has the potential to reach every device the company has sold, not only yours.”

“This is why firms should focus on operating under frameworks that prevent these scenarios entirely, like scaling bug bounty programs that channel security efforts into authorized, constructive activities. When security researchers work within this framework, they're protected legally, companies get stronger security, and innocent third parties are never put at risk.”