Top
Best
New

Posted by hhh 9 hours ago

My security camera shipped a GitHub admin token in its login page(hhh.hn)
418 points | 153 commentspage 2
jwithington 5 hours ago|
I've seen these systems at US defense industry tradeshows so I'm guessing they are in use somewhere.
dare944 3 hours ago||
> Why would Hanwha Vision need anything remotely related to the DoD? Is it possible that their CI is provided by some centralized team at their parent company Hanwha, where the needs of their sister company Hanwha Aerospace cause the shared platform to have these entries in the CI environment variables? Or maybe because of their other sister company, Hanwha Defense USA, where they make other large scary steel machines

Or... the Department of Warmongers (nee DoD) addresses on the device are evidence of a supply-side attack targeting the DoW and carried out using the aforementioned github admin token.

... I mean, while we're in here speculating about truffles and all.

asveikau 4 hours ago||
My cameras are analog rather than PoE or IP based, but that's just because I set up the initial iteration of the system a long time ago. The standard now is to give your camera an IP address.

With many IoT type things I block access to the public internet. I think with cameras specifically a lot of people even set it up physically on a different network that can only talk to the NVR.

But tldr, basing the cameras on IP invites some of the things in this article. Anyone deploying these devices needs to think about securing them.

kiddico 4 hours ago||
I have yet to find a pattern for when the author chooses to capitalize things.
limsungkee 4 hours ago||
This kind of open source expands the world.
hexxt-git 5 hours ago||
true open source!
qweqwe14 4 hours ago||
Why would you write like that? Not capitalizing the first word of a sentence makes the whole thing less readable. So that you can feel special? Really?
explorigin 4 hours ago|
Who hurt you? It's his own blog. Let him write the way he wants.
joka88xj 6 hours ago|
[flagged]
More comments...