4 ms·
Why do speakers even expose a web api in the first place? It’s just easily available without any security? Hope this person segmented this device away from oth
by xyst 2y ago
Why do speakers even expose a web api in the first place? It’s just easily available without any security?
Hope this person segmented this device away from other devices. The lack of basic security in the IoT space is astounding to me.
- jamesbvaughan 2y agoIt is concerning. On this particular model, it's available over plain HTTP, provides no auth settings, and provides an easy input for uploading new firmware. https://jamesbvaughan.com/volume-controller-1/basic-web-interface.png https://jamesbvaughan.com/volume-controller-1/basic-web-inte...
- giraffe_lady 2y ago“The S in IoT stands for secure.”
- denysvitali 2y agoI was looking for this comment. Basically he managed to get a sort of unauthenticated R/W access to the file system. This is really concerning