Open port 34567 for video streaming is indicative of a very common firmware package on the cheapest Chinese IP cameras, often called the Cantonk firmware althou

Open port 34567 for video streaming is indicative of a very common firmware package on the cheapest Chinese IP cameras, often called the Cantonk firmware although I'm not confident that Cantonk was the original developer. It's not as common as it used to be, thankfully, but AliExpress still carries plenty of devices running it. I'm unhappy with calling out plaintext storage of the WiFi password as a vulnerability. The device is a WiFi client. It ultimately needs to store either the password or the hash for a specific protocol, which is as good as a password (can be used to authenticate) with the downside that the device will need to be reconfigured if the network security protocol changes. WiFi passwords are shared keys, they must be shared. Absent some type of hardware secure enclave, any means of encrypting the shared key for storage would be mere obfuscation to an attacker with access to the device. This kind of knee-jerk "the password should not be stored in plaintext" seems to come from people who are rotely applying advice for services, not clients, without actually thinking out the threat model. Overall this analysis is very shallow and I think fails to get at by far the largest and most concerning attack surface on these devices, the cloud and NAT negotiation services used by the first party mobile apps.