I'd like to see a practical guide to leveraging this information
post
Oh, so you could work up a war driving rig to fry them. Neat.
That would scan your license plate. Better to use a drone.
Edit: that's not what this post suggests at all
This camera is missing Android security updates for the last eight years.
Any RCEs though? Or do they all require local privileges?
I think the idea is to chop them down and use the exploits to extract api keys to then attack their cloud infrastructure
Hmm, thinking bootloader sploits
I mean if you have physical access, then yea all bets are off. I was more thinking about remote exploits since most people (who aren't actually stealing/hacking on them directly) wouldn't be able to gain access otherwise.
I hope people hack/compromise them and use them against the police and the people in charge to embarrass and expose them. That's likely the only way they will finally get removed.
Guessing this is deliberate to enable warrantless use of the resource by people who wouldn't have been authorized to use it in the first place.
Android 8.1. That is just. Wow.
And hardcoded API keys? Bro seriously? This is a big "security" company and they're making baby's first programming mistake?
I have no words.
I'm not a dev by far but I read 'hardcoded credentials', was going to scroll on as I do, stopped, made a weird face and then laughed out loud for quite a while. Security, yeah. It's at same time strange, really funny and very sad that words have lost all meaning. We're living in full doublespeak times.
no comments (yet)