171–180 of 181 posts
Earlier quoted context omitted.
Fantastic. Why do you use rtsp for some streams and then tapo protocol for others? Are these all tapo cameras?
The other two are Annke C500 outdoor cameras.
Go2rtc is working flawlessly now with these tapo cameras. Thanks so much. Incredible how easy it was. And integrated with frigate as well.
So we're at the point that finding hardcoded admin passwords is no big deal.
Very nice project and writeup. I wish there was a repository of "appliances that don't try to shove an app and a subscription down your throat"
Earlier quoted context omitted.
Do you use an outdoor camera with this? I'm trying to find one and my c402 does not appear to have that support.
Sorry no. I use Reolink's for outdoor. The Tapo's are all indoor C210/C211 (cheap, but do the job just fine). Looks like the C402 has two different hardware versions[0] so maybe the old one doesn't work but the new one does? A firmware upgrade might also be worth trying. This reddit page suggests trying ONVIF as the go2RTC connection[1]. Good luck! [0]: https://www.tp-link.com/us/support/download/tapo-c402/ [1]: http…
Thanks for your comments.
Earlier quoted context omitted.
That's the first I've heard of pfsense having a bad reputation, can you explain? (I haven't used it, genuinely want to know)
https://arstechnica.com/gadgets/2021/03/buffer-overruns-lice...
sounds like the core of the issue was that Netgate hired a weirdo, and then botched how they handled it when the weirdo got -- go figure -- weird.
and it showed how FreeBSD does commits badly and may not have any (or few) code reviews
honestly makes me feel bad about using netgate boxes -- what else needs to be fixed?
Earlier quoted context omitted.
Most people only care about how strong the signal is when buying a router, but almost no one checks if the firmware is outdated, or bothers to change the default password or disable remote access. And manufacturers rarely remind you either, so over time it just becomes a hidden risk.
Most people don't buy routers, they get them from the ISP and never think about them again unless the wifi goes out, in which case they unplug and plug back in.
IoT security is generally terrible, but the fact that consumer routers are essentially unaudited black boxes processing all your network traffic is genuinely concerning. Most people have no idea their router firmware hasn't been updated in years and is probably running known CVEs. The supply chain trust model for networking hardware is broken.
A lot of them violate the GPL and BSD licenses too.
Earlier quoted context omitted.
GrapheneOS strongly recommends that you do not do it, but it will not stop you if you want to. You can root and leave your bootloader unlocked or create a custom user signed image with root support included. Plenty of user written guides out there how to do so.
> You can root and leave your bootloader unlocked That's Google, not GrapheneOS.
Earlier quoted context omitted.
Is there any residential router that exposes internal endpoints be default? I've yet to come across one that does not have a deny-any policy on it's WAN interface and has incoming destination NATs setup up. What use is reducing the attack surface of a device which only ever initiates connections? Edit: also there are network operators that block customer traffic on certain ports liike NetBIOS, SMB or SMTP to name a f…
If your home router is compromised (which is what the parent comment was talking about, considering it mentioned CVEs) the attacker who now controls it can easily make connections to devices on your network via the router’s local address. As for how the router that is theoretically not accepting incoming connections from the internet itself gets compromised in the first place: among other issues some routers can be R…
The edit was in response to "network operator's routers [...] don't perform any sort of filtering" and had nothing to do with C2 traffic?