63
Flock cameras are riddled with security vulnerabilities and hard-coded credentials (micahflee.com)
submitted 1 month ago by to c/privacy@programming.dev
3 comments fedilink hide all child comments
 

Despite being a relatively recent build, the Flock camera was running Android 8.1. This version of Android was released in 2017, and officially stopped getting support from Google in 2021 (see the Android end-of-life page for more info). And despite Google publishing security fixes for Android 8.1 until 2021, the Android patch level is 2018-06-05. This camera is missing Android security updates for the last eight years.

you are viewing a single comment's thread
view the rest of the comments
[–] 15 points 1 month ago (1 child)

Android 8.1. That is just. Wow.

And hardcoded API keys? Bro seriously? This is a big "security" company and they're making baby's first programming mistake?

I have no words.

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
  • [–] 7 points 1 month ago

    I'm not a dev by far but I read 'hardcoded credentials', was going to scroll on as I do, stopped, made a weird face and then laughed out loud for quite a while. Security, yeah. It's at same time strange, really funny and very sad that words have lost all meaning. We're living in full doublespeak times.

  • permalink
  • fedilink
  • source
  • parent