Vincent says "Our cloud data is absolutely secure, so you don't need to worry"
What the fuck does a WiFi Access Point need a cloud connection and an account for? Other than spying on me?
Well, it was possible without this a few firmware updates ago.
I did some more research: The device has the exact same hardware as the 3x more expensive one you actually own, just other firmware.
Fuck you, TP-Link!
Imagine you’re buying a safe. After your purchase, you realise your safe key does not work. You contact the manufacturer and they say ”oh we need to copy and authenticate your safe key in order for you to use it. We also need your address. Don’t worry, we keep the copies absolutely safe in our posession”
This is how dumb this argument sounds
You don't need to imagine this. That's exactly how many consumer safes work.
I bought a safe from Costco (USA) that had a Securam lock on it. I had a police officer friend causally mention that if they needed access, they'd call the safe company and get the backdoor code. I was a little shocked by this, so I emailed Securam. They said that actual use of such codes is at the discretion of the manufacturer that uses their locks, and they referred me to the safe manufacturer.
I emailed the manufacturer, and the customer support agent confirmed what my cop friend said. So I asked what security protocols the manufacturer had in place to authenticate callers and verify they were actual police, and also how they validated the warrant or court order used to get the info. The CS person didn't understand the idea that someone might be pretending to be an officer, nor that even a real officer might be making an unlawful request. She said that if an officer calls and asks, they give them the code. I asked the agent to send me a copy of their policy on this. A day later I got an angry response from the CS lead saying denying what the CS agent said, claiming that they don't have backdoor codes, and don't give them out to officers.
Yup. Liberty Safes had a huge scandal when it came out that they have override codes.
Call a locksmith, they can re-lock (as in change the whole thing) your safe. It's on my to do list, gonna replace my keypad with a dial.
Honestly, that’s still way more secure than OP’s image. Physical access is still required in your scenario.
And then they keep the copied key in a safe everyone on the world has access to and can try to penetrate it with some big ass hammer, and they just pray, that it's actually secure.
Or worse, they've already been hacked but the data not leaked because the hackers want on-going access to your credentials.
Whenever I hear "it hasn't been a problem", all I hear is "we don't have a plan for when it becomes a problem."