Ring’s New Encryption Standard: A Recipe for Convenience over Control?

Amazon’s Ring has introduced a new encryption standard, TAKE (Throw Away the Key Encryption), as the default setting for video encryption and user control. On the surface, this may seem like a step in the right direction, given growing concerns about data privacy and security. However, a closer look reveals that TAKE prioritizes convenience over actual security.

Ring justifies adopting TAKE by claiming it allows them to protect user privacy without relying on end-to-end encryption (E2EE), which can restrict features like video search, description, and shared trusted users. The company argues that E2EE is too restrictive, limiting the capabilities of its cloud-based services. This raises an important question: what kind of trade-offs are we willing to make in the name of convenience?

TAKE involves using a rotating set of encryption keys temporarily stored in the cloud. These keys can only be accessed by Ring to power features like Smart Alerts, which notify users when people, vehicles, or packages appear on camera. Once the request is completed, Ring claims to delete the keys within 24 hours. However, this setup still allows Ring to access and process user videos for its own purposes.

Ring’s collaboration with Messaging Layer Security (MLS), an open messaging standard, highlights a worrying trend: tech giants are developing their own security standards that may prioritize convenience over true data protection. This raises the stakes for users who rely on these services and must navigate the complexities of encrypted communication.

The introduction of TAKE comes amidst growing criticism of Ring’s data collection practices. The company’s “Familiar Faces” feature has been accused of using facial recognition to identify visitors without consent, sparking a class-action lawsuit against Amazon in June. Given this backdrop, it seems like Ring is doubling down on its business model rather than addressing the core issues.

The rollout of TAKE as the default standard worldwide creates an uneven playing field where some customers are forced to choose between convenience and security. This dynamic is especially relevant in the context of smart home devices, which often require seamless integration with other services. Users can still opt for E2EE, but this setup raises questions about data ownership and control.

The implications of TAKE go beyond Ring’s customer base. As more companies adopt similar encryption standards, we risk creating a system where data protection becomes an afterthought. This precedent is concerning: if tech giants can justify compromising user security in the name of convenience, what else are they willing to sacrifice? The answer may lie in the company’s response to criticism – namely, doing nothing.

The rollout of TAKE serves as a reminder that our data is not just at risk from external threats; it’s also vulnerable to the decisions made by those who control the systems we use. As users, we need to be more discerning about the trade-offs we make in exchange for convenience and innovation. In this case, Ring’s decision to prioritize TAKE over E2EE should raise some red flags – not just for its customers but for anyone concerned with maintaining our digital rights.

Ring’s positioning of itself as a champion of user security by introducing TAKE raises more questions than answers. How will users know if their data has been compromised, and what measures will be taken to prevent it? The lack of transparency surrounding TAKE’s implementation only exacerbates the problem. As we move forward in this era of smart home devices and increasingly complex encryption standards, one thing is clear: we can no longer afford to treat our data as a mere commodity.

The introduction of TAKE by Ring marks a turning point in the debate around data security. It highlights the need for a more nuanced discussion about what kind of trade-offs are acceptable when it comes to convenience versus control. As users, we must be vigilant and hold companies accountable for their actions – or lack thereof. In this case, Ring’s decision to prioritize TAKE over E2EE is a stark reminder that our data is not just at risk from external threats; it’s also vulnerable to the choices made by those who control the systems we use.

Ultimately, TAKE raises more questions than answers about the true intentions of companies like Ring and Amazon. As we continue down this path, one thing is certain: our data will be the casualty if we don’t demand better.