#Ring security system Bluetooth#
WL18MODGI - Ring LLC Bluetooth and Wi-Fi Bluetooth radio is used for initial base station configuration/pairing via the app, Wi-Fi is for internet connection.MCIMX7D5EVM10SD - Arm Cortex A7 32bit, 1GHz, 3 cores.JY976 (MTFC4GACAJCN-1M WT) - 4GB eMMC Flash Custom Linux based file system/OS resides on this chip.Wifi/Bluetooth, CPU, Flash, RAM, Ethernet, and Power Management ICs Below is the main board with all the metal shielding (for RF) in place: You can find “RedSky” referenced in the firmware, and silkscreened on the base station motherboard.
So what does this magical new device from Ring/Zonoff look like on the inside? I begin by tearing apart the Ring alarm base station known internally as “RedSky”. This led to a delay of the product being released until 2018 when ADT settled with Ring (reportedly for $25 million). ADT promptly sued Ring for “misappropriating IoT technology” from Zonoff that ADT said belonged to them ⁹. Ring used their newly acquired Zonoff team to build a new alarm system product called “Ring Protect” which they tried to introduce in 2017. Shortly thereafter, Ring stepped in and hired all of the Zonoff employees including the founder/CEO ⁸. With the Honeywell deal falling through and the damage from multiple lawsuits, Zonoff collapsed ⁷. Honeywell sued to block the merger on antitrust grounds and tried to acquire Zonoff in 2017, however, Honeywell dropped the antitrust case later in the year.
#Ring security system full#
In 2016, partially acquired Icontrol, and the full acquisition was completed in 2017. Zonoff grabbed another big customer in 2016, Dixons Carphone in the UK. Icontrol retaliated in 2015 by seeking an injunction to prevent them from selling their products.ĪDT tried to acquire Zonoff in 2016 but failed. There was also a deal with LG to power “LG Smart Security”. About 3 months afterward, Zonoff received a $31.8 million investment from ADT ⁶. In September 2014, Icontrol sued Zonoff for alleged patent infringement.
#Ring security system software#
Existing competitors in the market (Icontrol Networks, and ) already owned a large software home automation as a service (SHaaS) patent portfolio, so they were facing some tough, well-armed competition. In 2013, they received $3.8 million in venture capital funding ⁵.
Zonoff was a small Internet of Things (IoT) company founded in 2011 ⁴. When I started to dig into the Alarm system and saw references to “Zonoff”, I did some digging and discovered some interesting history. Little did I know, this product was designed primarily by a completely different group of people than the engineers who developed the Doorbell. As such, this new product seemed like a promising research target. Ring’s previous product, the Ring Doorbell, was plagued with security vulnerabilities such as allowing attackers to steal Wi-Fi passwords or view footage from the device’s video feed. In July 2018, Amazon’s Ring brought to market a new product - a low-cost, DIY home security system. This blog is not intended to be an endorsement for or against Ring products or services. As far as I am aware, the information below is not available anywhere else at this time. This blog is intended as a starting point for further research into Ring devices.
The following blog post details a complete teardown of the Ring security system base station and how I went about investigating the device. This is where I decided to focus my efforts. There are a few patched issues in the Ring doorbell and other components that deal with the leakage of potentially sensitive information, such as Wi-Fi credentials, but no real information about the internals of the Ring Alarm. Most of the vulnerabilities disclosed pertain to Ring’s cloud infrastructure, their website, mobile app or camera systems. One of the first things I noticed when beginning this research, however, was the complete lack of information publicly available for these particular Ring devices. Because of Ring’s immense popularity and accessibility, I decided it would be worth tearing down their alarm system in order to assess its security posture. Ring has faced scrutiny over the last couple of years for several security vulnerabilities¹ ² ³ and complaints of privacy concerns, including Amazon’s data-sharing relationships. Chief among these products is the Ring security system. It seems like everyone and their mother has some sort of fancy doorbell, camera system, or door sensor.
Off-the-shelf security systems intended for consumer use are all the rage these days.