Wyze Random notes

No public API
Official Client use a pretty pedestrian API
https://api.wyzecam.com:844.
The API seem to have no problem accepting requests from unofficial clients (TinyCam) using Wyze credentials.
Interesting note: Wyze customers don’t seem mind giving their username/password to an unauthorized 3rd party.
Usual unofficial GitHub
https://github.com/nblavoie/wyzecam-api
TinyCam developer (alexey.vasilyev) is an active reddit user and point to nblavoie GitHub



Some RTPS support for some of their camera
https://blog.12security.com/wyze/

https://www.facebook.com/WyzeCam/

https://forums.wyzecam.com/

https://www.inputmag.com/tech/consulting-firm-alleges-wyze-data-breach-affecting-24-million-customers

https://twitter.com/WyzeCam

Hardware:

Wyze V2 camera (aka NEOS Smartcam)
Original hardware [Xiaomi hardware Xiaofang 1S]
Wyze Pan camera (aka NEOS Smartcam)
Original hardware [Xiaomi hardware Xiaomi Dafang]
Seem Wyze and Neos just rebrand Xiaomi devices.
Both Wyze and Neos don’t seem to add any value and have 0 R&D.

Usual unofficial GitHub
Alternative “hacked firmware” :
https://github.com/EliasKotlyar/Xiaomi-Dafang-Hacks
I suspect Wyze “RTSP firmware” share the same code.
Not idea what is the original source.
I suspect the classic China manufacture “leak” and that’s the reason why Wyze can’t officially support it.








Xiaomi

Wyze

Kingsoft

 Cheetah Mobile

Neos

A substantial amount of the videos taken with Wyze in the United States have been exfiltrated to China for study and distributed to a variety of companies in the mainland. Many are involved in the healthcare space, such as iHealthLabs.

Wyze cameras automatically begin scanning a users network environment once plugged in and begin initiating a series of automated hacking attempts against devices in a user’s home.

All Wyze devices allow Wyze, or anyone who has accessed their database within the last 10 months, to SSH tunnel into the devices from anywhere in the world.

It jams its tentacles into your eyes to see what you see, into your veins to know how you feel, and finally crawl into your brain to be aware of everything you hear and ultimately to infer whatever you think, could consider, or have done.

CH-AW

Android “Ambient Weather” app progress.

API is pretty straightforward. I have the data from the station:


Need to find a decent way to help Joe Schmo to configure and share their Stations.

I wish Ambient Weather website would share a QRCode for each station’s apikey.


I’ ll implement a QRcode generator on the app landing page with the instructions. Not ideal but better than nothing.

Not sure if Ambient Weather people are going to be happy about it.