←back to thread

Wanted to spy on my dog, ended up spying on TP-Link

(kennedn.com)
436 points kennedn | 1 comments | 15 Sep 25 16:28 UTC | HN request time: 0.386s | source
Show context
micah94 ◴[15 Sep 25 17:17 UTC] No.45252395[source]▶
So we're at the point that finding hardcoded admin passwords is no big deal.
replies(5): >>45252452 #>>45252526 #>>45253010 #>>45253096 #>>45254073 #
mtlynch ◴[15 Sep 25 18:08 UTC] No.45253010[source]▶
It's a hardcoded default password, not a permanent backdoor. If I'm understanding the post correctly, the user changes it as part of the onboarding flow.

This is the way most apps work if they have a default password the user is supposed to change.

replies(2): >>45253178 #>>45253581 #
1. m463 ◴[15 Sep 25 18:56 UTC] No.45253581[source]▶
on the other hand "onboarding" seems to be a less offensive normalizing word which really means "ask permission to use device"...