Search results

Nah, I don't play that game. Whatever I would present as proof, you would just dismiss. I will just say, I am no security expert. I am just an average developer with experience running web services, and even I know how to get a proper cert and maybe validate it before pushing to the public...

Fair point.

Everything you just said is wrong. Literally everything :).

That is an interesting interpretation. I am posting details here so that this might be useful information to others who might be hitting the same issues that I am. I may or may not end up using a local service, but I am guessing that it is a non-trivial amount of effort to set up. The appeal...

Lol, you seem really defensive. Do you work for Sentry? I have reached out to them several times over the past month (email, IM, phone), and only now getting a response. Also, neither issue is resolved. Just answering the phone, while better than ignoring all communications, is not sufficient...

Update 2: I tried to use the chat on the web site, but got no response. Finally, I called them and was able to reach a person. They are aware of the cert issue and actively working to fix it. They moved the site to a new hosting provider and the certificate was not configured correctly. They are...

Update: They just closed my support request without any response :). hmm

It is not meaningless if people can't sign up in the first place. The signature was from the automated billing receipt, not an individual's email. But that is not the issue: if you have a public endpoint that is running, it should have a valid certificate, period. If they wanted to deprecate it...

I don't know that and never claimed that I did. I just know that they failed at the basics of security. If this happened at my company, someone would probably get fired. I used the URL that is in their CURRENT email signatures, not old and deprecated: If you have any questions, visit our...

Fair enough. I understand there is a certain amount of risk with any cloud service; that is unavoidable. However, there are more and less secure cloud services, and from the information I have so far, Sentry belongs to the "less secure" category. In any case, I will seek an explanation from...

All of these points are valid and seem to support the argument that Sentry is not trustworthy. I have also been investigating a local solution as you mentioned as an alternative because of these concerns.

I am just talking about the portal where I enter credit card information. But to your point, the security of the snapshots could be a much larger concern to many. Do you agree being able to trust Sentry with handling the camera images securely would be pretty important to many customers...

That would be really surprising. I work for a large software company and have managed web site certificates. The idea that a legit company, especially a security focused company, would leave a cert in an expired state for a public endpoint (or even allow it to happen in the first place) is...

My email provider also marks all their mails as "possible phishing attempts" probably because of the same cert issue. Does anyone else see this?

Do you get the cert error when you open the smarthomesentry.com link?

Also, the billing email references the same url in the signature: If you have any questions, visit our support site at https://www.smarthomesentry.com, contact us at support@smarthomesentry.com, Do others see the same link in their billing emails?

I am wondering if a scammer bought this domain, which I assume is the old domain since it was linked in BI: https://www.smarthomesentry.com/ Below is the error that I am seeing. Do you not get the same error? Websites prove their identity via certificates. Firefox does not trust this site...

I have tried to sign up for Sentry alerts, but 1. The link to Sentryhomesecurity.com from Blue Iris gives a bad certificate error. Also, emails from them have the same cert error. 2. Even if I bypass the certificate error, I get a 404 error, so no way to sign up from the Blue Iris software. 3...