Nurserycam horror show: 'Secure' daycare video monitoring product beamed DVR admin creds to all users
Company has a habit of reacting badly to vuln disclosures Gareth Corfield Thu 18 Feb 2021 // 12:01 UTC Share Copy Updated A parental webcam targeted at nursery schools was so poorly designed that anyone who downloaded its mobile app gained access to admin credentials, bypassing intended authentication, according to security pros – with one dad saying its creators brushed off his complaints about insecurities six years ago. Anyone could have logged into Nurserycam's DVRs thanks to poor design choices – and a decision to "authenticate" logins by passing the device's ...
Source: theregister.com