Open Menu
AllLocalCommunitiesAbout
lotide
AllLocalCommunitiesAbout
Login

My security camera shipped a GitHub admin token in its login page

⁨21⁩ ⁨likes⁩

Submitted ⁨⁨3⁩ ⁨days⁩ ago⁩ by ⁨cm0002@europe.pub⁩ to ⁨cybersecurity@infosec.pub⁩

https://hhh.hn/hanwha-github-token/

source

Comments

Sort:hotnewtop
  • Brkdncr@lemmy.world ⁨3⁩ ⁨days⁩ ago

    Neat. Company leaves admin keys in device firmware, device references DoD ip space, and company makes products like automated turrets.

    source
  • frongt@lemmy.zip ⁨3⁩ ⁨days⁩ ago

    is this just a coincidence and one of those weird instances where people have taken IP space for internal services when they know they will never interact with it

    It’s this one. It’s a fairly common and fairly bad practice.

    I hope the author pulls the next firmware bin and checks it for keys again.

    source