[QUESTION] GDPR (General Data Protection Regulation) compliant when communicate between zkteco device and 3rd party software

[duong77476-viindoo]

Hi, i have my client using some kind of cloud provider (detail is : odoo.sh) . Does the communication between zkteco device and 3rd party software which is on the odoo.sh cloud is GDPR compliant. Does anyone be able to catch the data transfer between it like fingerprint and then replace by their own to cause harmful damage ?

I know that when in LAN internet is GDPR compliant since our LAN is a physical barrier that protects the data.

[kurenai-ryu]

you probably need to ask whoever made the odoo integration

[duong77476-viindoo]

you probably need to ask whoever made the odoo integration

Actually i did, using this library. Anyway thank you

[kurenai-ryu]

regarding your question:

Does anyone be able to catch the data transfer between it like fingerprint and then replace by their own to cause harmful damage ?

yes, it is possible, as the communication is not encrypted, it has minimum security (just a packet counter and some keys to start communication) It's recommended to use a VPN to secure the communication with remote devices, the VPN should offer enough security in that case

[duong77476-viindoo]

@kurenai-ryu oh yes thanks you, my client said the same thing, i think if i use wireshark software then i can catch some kind of packet containing fingerprint or maybe user name right?

[kurenai-ryu]

yup, I made a package decoder for wireshark, you can install it and take a look at the packets, all plain data.

[duong77476-viindoo]

yup, I made a package decoder for wireshark, you can install it and take a look at the packets, all plain data.

Thank you very much, i 'll take a look later