TRENDnet IP cameras acessible without authentication

  • A big red "critical update patch" banner showing on the TRENDnet site already, nice to see.

  • There's a googledoc floating around with a big list of urls for these things. It includes significantly more than the 350 devices he mentions iirc.

  • This is why you put your permission checks on the resource itself, not on the link to the resource (well, in addition to, really).

  • Trendnet appears to be in compliance with its GPL obligations (at first glance.) It should be possible for anyone to develop a patch for the camera.

  • I have one of these cameras, specifically, the TV-IP422W. Great to see TRENDnet pushing an update so fast.

  • Saw this on Reddit weeks ago (maybe a month+?). Glad to see the matter has finally been addressed.

  • This seems very illegal (looking through someone elses camera)