My security camera shipped a GitHub admin token in its login page (hhh.hn)
from cm0002@europe.pub to cybersecurity@infosec.pub on 24 Jul 20:06
https://europe.pub/post/14441042

#cybersecurity

threaded - newest

frongt@lemmy.zip on 24 Jul 20:26 next collapse

is this just a coincidence and one of those weird instances where people have taken IP space for internal services when they know they will never interact with it

It’s this one. It’s a fairly common and fairly bad practice.

I hope the author pulls the next firmware bin and checks it for keys again.

Brkdncr@lemmy.world on 24 Jul 20:43 collapse

Neat. Company leaves admin keys in device firmware, device references DoD ip space, and company makes products like automated turrets.