News for hackers. Stuff that matters.

A comment on A Data Leak Exposed the Personal Information of over 3k Ring Users. Parent comment

Re:A Data Leak Exposed the Personal Information of over 3k R... by strictnein on Thursday December 19, 2019 @05:56PM (#21840123)
This is a credential stuffing attack.

Why did they add it? Why not? I'm betting when they logged in that info came back as part of the API call.

[ Parent | on HN ]
Re:A Data Leak Exposed the Personal Information of over 3k R... by HenriNext on Thursday December 19, 2019 @06:11PM (#21840248)
> Why did they add it?

If they were going to sell the information, and the credentials really allowed to remotely access the cameras, then accessing 'camera=BEDROOM' at 11PM Friday local time may provide more entertainment value than 'camera=GARAGE'? :)

[ Parent | on HN ]