91
TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering (www.evilsocket.net)
submitted 9 months ago by to c/technology@lemmy.world
5 comments fedilink hide all child comments

all 6 comments

sorted by: hot top controversial new old
[–] 7 points 9 months ago (4 children)

Part of the problem here is I'm pretty certain they don't develop their own hardware or the firmware for it, they rebrand a different OEM and sometimes give it a different plastic shell.

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 1 point 9 months ago (3 children)

    Is that true for TP-link? I always thought they were an OEM.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 9 months ago (2 children)

    For the Kasa/Tapo line it seems to be. I was talking with a security camera guy about them, he recognized several but from a different brand. Not all of the line are like that. The ones he recognized predated their release by tplink which is why I think they rebranded.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 9 months ago (1 child)

    That sucks. From the article it looks like they are at least writing the firmware, but it's hard to tell.

    I'm curious because I just ordered a couple of C210s to tinker with.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 9 months ago

    It's unlikely you're going to be targeted by someone who can do this, so as long as your cameras aren't directly connected to the internet and your router at least has a password I wouldn't worry too much.

  • permalink
  • fedilink
  • source
  • parent
    • [+] 0 points 9 months ago
    [removed by mod]
  • permalink
  • fedilink
  • source
    •