Reply to post: Re: Name and shame

The Internet of Things is a security nightmare, latest real-world analysis reveals: Unencrypted traffic, network crossover, vulnerable OSes

Alan Brown Silver badge

Re: Name and shame

(2) The keypair can be trivially located in the firmware

The keypairs for virtually all Hisilicon-based network video cameras/DVRs are viewable in plaintext - including a private signing key

(Hint: if your CCTV system uses any kind of "XM" software, yer already pwned, you just don't know it yet.)

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon