4 ms·

The report seems obviously AI generated, so I can't be bothered to read in its entirety, but based on my quick skim, "leaked home GPS" makes it sound worse than

by gruez 3mo ago

The report seems obviously AI generated, so I can't be bothered to read in its entirety, but based on my quick skim, "leaked home GPS" makes it sound worse than it is. Unless you're dumb enough to set DMZ on this device, this won't be exposed to the internet, and if it's LAN only, don't you already know the location? Even for a remote attacker who somehow got LAN access remotely, they can probably deduce the location through other means (eg. using crowdsourced wifi databases).

forestry 3mo ago
[flagged]
- wolvoleo 3mo ago
  A random post on hacker news isn't going to make a dent in TP-Link's camera marketshare positive or negative. If the GP really has bad motives they wouldn't really accomplish anything with that. But I doubt they do. I use these cams myself too. They're ok if you limit their internet access. I limit all my TP-Link stuff anyway since they suddenly removed local access for their switched power plugs in an auto firmware update. It's not the best company but they're cheap.
  - lostmsu 3mo ago
    > since they suddenly removed local access for their switched power plugs in an auto firmware update. AFAIK it was because it was an unencrypted protocol and you can just manually turn it back on in device settings.
- justsomehnguy 3mo ago
  There is only two ways to receive this unencrypted data: - to do the song and dance to allow the whole Internet to access this cam - and 'security professionals' have been advising no to do that no matter what vendor it is - to sit on your wire, literally and sniff everything Unencrypted personal data is not good but if you have a habit of leaving your car with the open doors, windows and a key in the ignition - don't run around telling horror stories what someone didn't close the lid on a cookie jar.
  - fragmede 3mo ago
    That's because you live in a shitty place where your can't do that with your car, and think that's normal. There are places in the world where you can just leave your car unlocked with cash sitting out, and no one steals it. Yeah, the Internet is not such a place, so we can't act that way here, but in the physical world, there are safe places where you can relax.
    - justsomehnguy 3mo ago
      > . There are places in the world where you can just leave your car unlocked with cash sitting out, And most of the time it's because there is only a couple humans and bears out there. But sure, attacking me would get your point across, Mr. Beautiful Garden citizen.
- pudgywalsh 3mo ago
  Security professionals - the progenitors of unrealistic expectations - also expect homeowners to buy $800 Axis cameras while they stroke their beards. When they get down to the $20 price point like the Chinese schlock, let me know, I'll be first in line to buy them.
  - inigyou 3mo ago
    Quality costs money, but money doesn't guarantee quality. Maybe the $800 camera is worth saving up for. But in this market for technological lemons, it's more likely they'll just buy the $20 camera and resell it to you for $800 and you're the sucker in the transaction.
locknitpicker 3mo ago
> Unless you're dumb enough to (...) It sounds like you are blaming the user for providing data that a service can leak. That's like blaming a user for writing personal emails when faced with an email provider that leaks emails.
- arjie 3mo ago
  Really enjoying the picture of this user who logs into his router and decides that all unsolicited network traffic from the internet should go to his network camera. Absolute legend. God amongst men.
  - maccard 3mo ago
    This user doesn’t know what they’re enabling, they’re following steps from a blog post or something to allow access from outside their home. DMZs as a solution to port forwarding issues have been a misunderstood part of online games troubleshooting for at least 20 years.
  - bobmcnamara 3mo ago
    Heck I've seen it admins do this, then I rooted the camera and pivoted into their data center and put it into the report, "security contractor told is they needed it"
  - locknitpicker 3mo ago
    > Really enjoying the picture of this user who logs into his router and decides that all unsolicited network traffic from the internet should go to his network camera. Absolute legend. God amongst men. If that idea surprises you then you definitely need to touch grass. Even cloud computing engineers are surprised to see random internet requests hitting services,and here you are assuming that any regular consumer that just wants a security camera to work will somehow have deep understanding of networking and DevSecOps and trying to ridicule those who don't.

by gruez 3mo ago

forestry 3mo ago

[flagged]

wolvoleo 3mo ago
A random post on hacker news isn't going to make a dent in TP-Link's camera marketshare positive or negative. If the GP really has bad motives they wouldn't really accomplish anything with that. But I doubt they do. I use these cams myself too. They're ok if you limit their internet access. I limit all my TP-Link stuff anyway since they suddenly removed local access for their switched power plugs in an auto firmware update. It's not the best company but they're cheap.
- lostmsu 3mo ago
  > since they suddenly removed local access for their switched power plugs in an auto firmware update. AFAIK it was because it was an unencrypted protocol and you can just manually turn it back on in device settings.
justsomehnguy 3mo ago
There is only two ways to receive this unencrypted data: - to do the song and dance to allow the whole Internet to access this cam - and 'security professionals' have been advising no to do that no matter what vendor it is - to sit on your wire, literally and sniff everything Unencrypted personal data is not good but if you have a habit of leaving your car with the open doors, windows and a key in the ignition - don't run around telling horror stories what someone didn't close the lid on a cookie jar.
- fragmede 3mo ago
  That's because you live in a shitty place where your can't do that with your car, and think that's normal. There are places in the world where you can just leave your car unlocked with cash sitting out, and no one steals it. Yeah, the Internet is not such a place, so we can't act that way here, but in the physical world, there are safe places where you can relax.
  - justsomehnguy 3mo ago
    > . There are places in the world where you can just leave your car unlocked with cash sitting out, And most of the time it's because there is only a couple humans and bears out there. But sure, attacking me would get your point across, Mr. Beautiful Garden citizen.
pudgywalsh 3mo ago
Security professionals - the progenitors of unrealistic expectations - also expect homeowners to buy $800 Axis cameras while they stroke their beards. When they get down to the $20 price point like the Chinese schlock, let me know, I'll be first in line to buy them.
- inigyou 3mo ago
  Quality costs money, but money doesn't guarantee quality. Maybe the $800 camera is worth saving up for. But in this market for technological lemons, it's more likely they'll just buy the $20 camera and resell it to you for $800 and you're the sucker in the transaction.

locknitpicker 3mo ago

> Unless you're dumb enough to (...) It sounds like you are blaming the user for providing data that a service can leak. That's like blaming a user for writing personal emails when faced with an email provider that leaks emails.

arjie 3mo ago
Really enjoying the picture of this user who logs into his router and decides that all unsolicited network traffic from the internet should go to his network camera. Absolute legend. God amongst men.
- maccard 3mo ago
  This user doesn’t know what they’re enabling, they’re following steps from a blog post or something to allow access from outside their home. DMZs as a solution to port forwarding issues have been a misunderstood part of online games troubleshooting for at least 20 years.
- bobmcnamara 3mo ago
  Heck I've seen it admins do this, then I rooted the camera and pivoted into their data center and put it into the report, "security contractor told is they needed it"
- locknitpicker 3mo ago
  > Really enjoying the picture of this user who logs into his router and decides that all unsolicited network traffic from the internet should go to his network camera. Absolute legend. God amongst men. If that idea surprises you then you definitely need to touch grass. Even cloud computing engineers are surprised to see random internet requests hitting services,and here you are assuming that any regular consumer that just wants a security camera to work will somehow have deep understanding of networking and DevSecOps and trying to ridicule those who don't.