Security Camera GitHub Leak

Executive TL;DR:

• Security camera ships with GitHub admin token in its login page
• US/UK consumers at risk due to hardcoded credentials
• Separate VLAN recommended to mitigate risks

The Internet’s Verdict: 70% Hyped, 30% Skeptical

Forum Reactions

Users are expressing concerns over security camera vendors’ priorities.

Not surprised, many of these vendors are doing crazy things, insane defaults, broken security, hardcoded values. Security is not a priority, I get that, but at the very least some baseline check would be nice (no hardcoded credentials for starting)

Technical Concerns

Some users are looking for alternatives with supported open firmware.

Worthy thread to ask: is there such a thing as a white label IP camera (or similar) with a supported open firmware? Not asking for open source, but something close to plug and play that nonetheless has a way of stripping the rootfs as desired for bespoke use in a manufacturer-supported way.

A rule of thumb is to put cameras on a separate VLAN and never give that VLAN internet access.

Focus Keyword: Security Camera