A team of computer science students from Florida Tech has discovered privacy flaws in popular IoT devices, including Internet-enabled doorbells and security cameras. The team observed that the mechanism for removing user accounts on shared devices does not remove active user accounts. This security flaw would allow an attacker to preserve access to a system, secretly recording audio and video. The ability to retain device access after a password change was reproduced on 16 out of 19 popular IoT cameras. Vendors were also informed about the vulnerabilities, and strategies to mitigate the flaws have been provided.”]