TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering
https://www.evilsocket.net/2025/12/18/TP-Link-Tapo-C200-Hardcoded-Keys-Buffer-Overflows-and-Privacy-in-the-Era-of-AI-Assisted-Reverse-Engineering/
90 points · 5 comments · view on lemmy.world
5 Comments
db2@lemmy.world · 7 pts · 245d
Part of the problem here is I'm pretty certain they don't develop their own hardware or the firmware for it, they rebrand a different OEM and sometimes give it a different plastic shell.
JohnnyCanuck@lemmy.ca · 1 pts · 245d
Is that true for TP-link? I always thought they were an OEM.
db2@lemmy.world · 2 pts · 245d
For the Kasa/Tapo line it seems to be. I was talking with a security camera guy about them, he recognized several but from a different brand. Not all of the line are like that. The ones he recognized predated their release by tplink which is why I think they rebranded.
JohnnyCanuck@lemmy.ca · 1 pts · 245d
That sucks. From the article it looks like they are at least writing the firmware, but it's hard to tell.
I'm curious because I just ordered a couple of C210s to tinker with.
db2@lemmy.world · 1 pts · 245d
It's unlikely you're going to be targeted by someone who can do this, so as long as your cameras aren't directly connected to the internet and your router at least has a password I wouldn't worry too much.
MildlyConcerned@lemmy.world · 0 pts · 245d