@ins0mniak @dcc @nyanide @sysrq @mr64bit IoT is a goldmine of security vulns. It almost seems impossible to someone that hasn't dabbled in it. Like UART root shells, hard-coded passwords across multiple products, weak custom encryption and raw HTTP traffic are basically the norm to this day. Especially on products from Asia.

To this day basically no sysadmin updates firmware for most of the embedded devices on network. The Hollywood camera stuff presented at Blackhat a decade ago still mostly holds true. It's ridiculous.