Attributed metadata history
Up to 100 retained publisher events per page for c21c8e3450ed4bf6a837800d892dda87bcaf0c29a8ea1c4e3c72edd4b46a20a0. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_ad89769b9e64591ab5
observed · 2026-10-12 14:01:03 UTC
VStarcam is an important brand of cameras based on the PPPP protocol. Unlike the LookCam cameras I looked into earlier, these are often being positioned as security cameras. And they in fact do a few things better like… well, like having a mostly working authentication mechanism. In order to access the camera one has to know its administrator password. So much for the theory. When I looked into the firmware of the cameras I discovered a surprising development: over the past years this protection has been systematically undermined. Various mechanisms have been added that leak the access password, and in several cases these cannot be explained as accidents. The overall tendency is clear: for some reason VStarcam really wants to have access to their customer’s passwords. A reminder: “P2P” functionality based on the PPPP protocol means that these cameras will always communicate with and be accessible from the internet, even when located on a home network behind NAT. Short of installing a custom firmware this can only addressed by configuring the network firewall to deny internet access. Contents How to recognize affected cameras Downloading the firmware Cav
Fingerprint: 92cfe220b6faa5b1bd41722928f9845e4b8ce1d6d8913c0eada3c4e9b444327f
intelligence_src_ad89769b9e64591ab5
observed · 2026-10-12 14:01:03 UTC
available
Fingerprint: 05d146f940ea021a0ff67bda626eeffcdf1f2ccbc0f3c3114fff19b0a80eeaf4