3 ms·
This is a credential stuffing attack. Why did they add it? Why not? I'm betting when they logged in that info came back as part of the API call.
by strictnein 7y ago
This is a credential stuffing attack.
Why did they add it? Why not? I'm betting when they logged in that info came back as part of the API call.
- HenriNext 7y ago> Why did they add it? If they were going to sell the information, and the credentials really allowed to remotely access the cameras, then accessing 'camera=BEDROOM' at 11PM Friday local time may provide more entertainment value than 'camera=GARAGE'? :)