BadChemical

5 ms·

1. 1.▲
   by BadChemical 3mo ago

   The UDP is through the broken, since 2016, TP link smart home protol. Exfiltration would require a precursor network foothold for a pure network vector, or for local 2nd hand markets the data is returned from the device broadcasted AP which
2. 2.▲
   TP-Link Kasa cameras leaked home GPS via unauthenticated UDP for 6 years(github.com)

   237 points by BadChemical 3mo ago|88 comments
3. 3.▲
   by BadChemical 3mo ago

   Six months of coordinated disclosure on a TP-Link Kasa camera resulted in two CVEs, a triage failure where the vendor described a vulnerability that doesn't exist in the reported payload, a beta patch that permanently bricked my test d