Ethical Hacking News
Ring has introduced a new encryption method called "Throw Away the Key Encryption" (TAKE), which aims to strike a balance between security, privacy, and convenience. The feature, which will become the default on all Ring cameras, is designed to provide users with greater control over their video data while still allowing for the use of various features. However, concerns remain about data security and government access, raising questions about the effectiveness of TAKE in addressing these concerns.
Ring introduces "Throw Away the Key Encryption" (TAKE), a new encryption method that balances security, privacy, and convenience. TAKE is built on the Messaging Layer Security (MLS) standard and allows Ring to access certain information while protecting video data. The feature stores encryption keys in a secure enclave and generates new keys every five minutes. Ring has taken steps to ensure user security and privacy, including updating its Law Enforcement Guidelines. Critics argue that TAKE does not completely eliminate data security concerns and relies on Amazon's cloud infrastructure. Ring claims to only train on publicly available data or data with explicit user permission. TAKE is developed in response to concerns about Ring's ties to law enforcement and AI-powered features. The feature will be implemented as the default encryption method for all Ring customers, starting in September.
Ring, a popular smart home security company, has introduced a new encryption method called "Throw Away the Key Encryption" (TAKE), which aims to strike a balance between security, privacy, and convenience. The feature, which will become the default on all Ring cameras, is designed to provide users with greater control over their video data while still allowing for the use of various features, such as smart alerts and video search.
The TAKE method is built on the Messaging Layer Security (MLS) standard, an open standard developed by the Internet Engineering Task Force. According to Jennifer Pattison Tuohy, a senior reviewer with over twenty years of experience, TAKE is "inspired by the privacy principles of end-to-end encryption," but with a twist. Unlike traditional end-to-end encryption, TAKE allows Ring to access certain information, such as basic subscriber information, while still protecting video data.
The feature works by storing encryption keys in a secure enclave, which is accessible only under strict conditions. These conditions include features enabled on the account, and the keys are generated and rotated every five minutes. The keys are then stored in a cloud-based database, and copies are deleted after 24 hours. This process allows users to keep their keys and have full control over their videos.
According to Ring spokesperson Sam McGee, the company has taken steps to ensure the security and privacy of its users. "Ring will only be able to provide non-video information … and encrypted video files in response," he said. "We have updated our Law Enforcement Guidelines to reflect this change."
However, critics argue that TAKE does not completely eliminate the privacy trade-off of cloud-based cameras. While it provides greater control over video data, it still relies on Amazon's cloud infrastructure, which raises concerns about data security and government access.
Some experts have raised concerns about the potential for Ring to train on user data or create backdoors for law enforcement agencies. However, according to McGee, Ring only trains on publicly available data or data with explicit user permission. "We only train on video recordings that have been made publicly available, or on recordings from users who have given Ring explicit permission to use them for this purpose," he said.
TAKE is also being developed in response to concerns about Ring's ties to law enforcement and the privacy implications of its AI-powered Search Party feature. The feature, which allows users to share footage with law enforcement agencies, has been criticized for its potential to facilitate mass surveillance.
In a statement, Ring said that TAKE is designed to provide users with greater control over their data while still allowing for the use of various features. "TAKE is built on an open standard, Messaging Layer Security, and is designed to provide users with the security and privacy they expect from their devices," the company said.
The rollout of TAKE is gradual, starting in September, and will be implemented regardless of whether users have a subscription. The feature is expected to become the default encryption method for all Ring customers, although some older cameras will still support traditional end-to-end encryption.
While TAKE provides a balance between security and convenience, it is still a subject of debate among experts and users. Some argue that it does not go far enough to address concerns about data security and government access, while others see it as a step in the right direction towards providing users with greater control over their data.
Regardless of the controversy surrounding TAKE, it is clear that Ring has taken steps to address concerns about data security and privacy. The company's commitment to providing users with greater control over their data, while still allowing for the use of various features, is a positive step towards building trust with its customers.
Related Information:
https://www.ethicalhackingnews.com/articles/Rings-New-Encryption-Method-A-Balance-Between-Security-and-Convenience-ehn.shtml
https://www.theverge.com/tech/984838/ring-take-encryption-throw-away-the-key-law-enforcement
https://www.jazawta.com/news/article/2499634
Published: Wed Aug 26 10:58:09 2026 by llama3.2 3B Q4_K_M
