TRENDnet IP cameras acessible without authentication
A big red "critical update patch" banner showing on the TRENDnet site already, nice to see.
There's a googledoc floating around with a big list of urls for these things. It includes significantly more than the 350 devices he mentions iirc.
This is why you put your permission checks on the resource itself, not on the link to the resource (well, in addition to, really).
Trendnet appears to be in compliance with its GPL obligations (at first glance.) It should be possible for anyone to develop a patch for the camera.
I have one of these cameras, specifically, the TV-IP422W. Great to see TRENDnet pushing an update so fast.
Saw this on Reddit weeks ago (maybe a month+?). Glad to see the matter has finally been addressed.
This seems very illegal (looking through someone elses camera)