Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

My security camera shipped a GitHub admin token in its login page

hhh.hn

Post reply on HN
Print view View original

121–130 of 265 posts

Re: My security camera shipped a GitHub admin token in its login page

#121

Post by inigyou »

ConceptJunkie wrote: post #103
inigyou wrote: post #54

Earlier quoted context omitted.

All global IPv6 addresses start with 2. This is by design. Pedantically, 3 is also reserved for global. Some other prefixes are also reserved, like fd for the ULA (local) range. The point of IPv6 was to make the addresses so long they are easy to manage.

The point of IPv6 was to make the addresses so long that we don't run out of them in 20 years or so. There fixed that for you.

We already ran out of ipv4 about 15 years AGO.

64 bits would be enough to avoid run out, but hierarchical allocation would still be a problem. 128 bits is long enough for many levels of hierarchy. (And yes, you can subnet all the bits, not just the first 64)

Re: My security camera shipped a GitHub admin token in its login page

#122

Post by inigyou »

unethical_ban wrote: post #74
Matuzy wrote: post #31

Earlier quoted context omitted.

> Yet another thing ipv6 solves. ... it's unlikely to conflict with the current global range I'm not familiar with IPv6's details, could you elaborate on this? To me, this reads like you're saying that IPv6 solves the problem by having low adoption rates rather than an actual function of the protocol.

Respectfully I don't think they explained it well. fc00::/7 is for "Unique Local Addresses". Basically, private, non-globally-routable addresses from which you can freely pick space. Kind of like RFC1918. It's deliberately huge and you should only use as much from it as you need. The idea being that if you merge with another organization or connect to them via VPN, it's unlikely your addresses will collide like with…

If you can't remember 192.168 you definitely can't remember a randomly picked ULA. So just use fd00. It's not any worse than 192.168.

Re: My security camera shipped a GitHub admin token in its login page

#123

Post by inigyou »

tredre3 wrote: post #105
tracker1 wrote: post #85

Earlier quoted context omitted.

One thing I don't appreciate... Is the nature of NAT protected my internal/home network before... now, I have to actually configure firewall settings etc. to protect IPv6 issued addresses internally. I know you can just block inbound non-established connections, but it feels like an extra step and complexity. Not to mention, that I really don't understand how IPs are supposed to be provisioned to devices on IPv6. Is…

> Not to mention, that I really don't understand how IPs are supposed to be provisioned to devices on IPv6. SLAAC is the only way that works across all IPV6 devices. In that mode, the router advertises the prefix and the device assigns its own address (prefix + its mac address). DHCPv6 exists but is poorly supported. It sucks for people who like assigning IPs individually from an authoritative place (through static d…

And there's always static configuration, useful for servers.

Re: My security camera shipped a GitHub admin token in its login page

#125

Post by tracker1 »

tredre3 wrote: post #105
tracker1 wrote: post #85

Earlier quoted context omitted.

One thing I don't appreciate... Is the nature of NAT protected my internal/home network before... now, I have to actually configure firewall settings etc. to protect IPv6 issued addresses internally. I know you can just block inbound non-established connections, but it feels like an extra step and complexity. Not to mention, that I really don't understand how IPs are supposed to be provisioned to devices on IPv6. Is…

> Not to mention, that I really don't understand how IPs are supposed to be provisioned to devices on IPv6. SLAAC is the only way that works across all IPV6 devices. In that mode, the router advertises the prefix and the device assigns its own address (prefix + its mac address). DHCPv6 exists but is poorly supported. It sucks for people who like assigning IPs individually from an authoritative place (through static d…

Which doubly sucks in terms of assigning a DNS name to an IP/PC... and/or opening the assignment to less restricted access... feels just problematic to me.

Again, I don't know any of IPv6 enough to use it really right or wrong.

Re: My security camera shipped a GitHub admin token in its login page

#126

Post by xiconfjs »

badatnames wrote: post #107

Worthy thread to ask: is there such a thing as a white label IP camera (or similar) with a supported open firmware? Not asking for open source, but something close to plug and play that nonetheless has a way of stripping the rootfs as desired for bespoke use in a manufacturer-supported way. I have looked around before but I only found genuinely dev-oriented kits that weren't even in a shell, and crazy priced. edit: s…

Thank you. Ordered one to play around and see if this is a viable alternative.

Re: My security camera shipped a GitHub admin token in its login page

#128

Post by ralph84 »

ConceptJunkie wrote: post #103
inigyou wrote: post #54

Earlier quoted context omitted.

All global IPv6 addresses start with 2. This is by design. Pedantically, 3 is also reserved for global. Some other prefixes are also reserved, like fd for the ULA (local) range. The point of IPv6 was to make the addresses so long they are easy to manage.

The point of IPv6 was to make the addresses so long that we don't run out of them in 20 years or so. There fixed that for you.

The problem is NAT solved the same problem more easily and cheaply. It was at the cost of making it difficult for every host to talk directly to every other host, but it turned out most of the people building networks didn't want that feature anyway.

Re: My security camera shipped a GitHub admin token in its login page

#129

Post by em3rgent0rdr »

badatnames wrote: post #107

Worthy thread to ask: is there such a thing as a white label IP camera (or similar) with a supported open firmware? Not asking for open source, but something close to plug and play that nonetheless has a way of stripping the rootfs as desired for bespoke use in a manufacturer-supported way. I have looked around before but I only found genuinely dev-oriented kits that weren't even in a shell, and crazy priced. edit: s…

ESP32-CAM

Re: My security camera shipped a GitHub admin token in its login page

#130

Post by nozzlegear »

badatnames wrote: post #107

Worthy thread to ask: is there such a thing as a white label IP camera (or similar) with a supported open firmware? Not asking for open source, but something close to plug and play that nonetheless has a way of stripping the rootfs as desired for bespoke use in a manufacturer-supported way. I have looked around before but I only found genuinely dev-oriented kits that weren't even in a shell, and crazy priced. edit: s…

Seems like the shop is broken?

> Stránka nenalezena

> There's been a glitch...

> We're not quite sure what went wrong. You can go back, or try looking on our homepage.

Post reply on HN