The report seems obviously AI generated, so I can't be bothered to read in its entirety, but based on my quick skim, "leaked home GPS" makes it sound worse than it is. Unless you're dumb enough to set DMZ on this device, this won't be exposed to the internet, and if it's LAN only, don't you already know the location? Even for a remote attacker who somehow got LAN access remotely, they can probably deduce the location through other means (eg. using crowdsourced wifi databases).
> Unless you're dumb enough to (...)
It sounds like you are blaming the user for providing data that a service can leak. That's like blaming a user for writing personal emails when faced with an email provider that leaks emails.
Really enjoying the picture of this user who logs into his router and decides that all unsolicited network traffic from the internet should go to his network camera. Absolute legend. God amongst men.
This user doesn’t know what they’re enabling, they’re following steps from a blog post or something to allow access from outside their home.
DMZs as a solution to port forwarding issues have been a misunderstood part of online games troubleshooting for at least 20 years.
Heck I've seen it admins do this, then I rooted the camera and pivoted into their data center and put it into the report, "security contractor told is they needed it"
> Really enjoying the picture of this user who logs into his router and decides that all unsolicited network traffic from the internet should go to his network camera. Absolute legend. God amongst men.
If that idea surprises you then you definitely need to touch grass. Even cloud computing engineers are surprised to see random internet requests hitting services,and here you are assuming that any regular consumer that just wants a security camera to work will somehow have deep understanding of networking and DevSecOps and trying to ridicule those who don't.
[flagged]
Security professionals - the progenitors of unrealistic expectations - also expect homeowners to buy $800 Axis cameras while they stroke their beards.
When they get down to the $20 price point like the Chinese schlock, let me know, I'll be first in line to buy them.
Quality costs money, but money doesn't guarantee quality. Maybe the $800 camera is worth saving up for. But in this market for technological lemons, it's more likely they'll just buy the $20 camera and resell it to you for $800 and you're the sucker in the transaction.
A random post on hacker news isn't going to make a dent in TP-Link's camera marketshare positive or negative. If the GP really has bad motives they wouldn't really accomplish anything with that. But I doubt they do. I use these cams myself too. They're ok if you limit their internet access. I limit all my TP-Link stuff anyway since they suddenly removed local access for their switched power plugs in an auto firmware update.
It's not the best company but they're cheap.
> since they suddenly removed local access for their switched power plugs in an auto firmware update.
AFAIK it was because it was an unencrypted protocol and you can just manually turn it back on in device settings.
There is only two ways to receive this unencrypted data:
- to do the song and dance to allow the whole Internet to access this cam - and 'security professionals' have been advising no to do that no matter what vendor it is
- to sit on your wire, literally and sniff everything
Unencrypted personal data is not good but if you have a habit of leaving your car with the open doors, windows and a key in the ignition - don't run around telling horror stories what someone didn't close the lid on a cookie jar.
That's because you live in a shitty place where your can't do that with your car, and think that's normal. There are places in the world where you can just leave your car unlocked with cash sitting out, and no one steals it. Yeah, the Internet is not such a place, so we can't act that way here, but in the physical world, there are safe places where you can relax.
> . There are places in the world where you can just leave your car unlocked with cash sitting out,
And most of the time it's because there is only a couple humans and bears out there. But sure, attacking me would get your point across, Mr. Beautiful Garden citizen.