News for hackers. Stuff that matters.

A comment on TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy. Parent comment

Re:TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and P... by necovek on Saturday December 20, 2025 @01:50AM (#46334137)
Since firmware is supposed to be accessible to users worldwide, making it easier to get it is good.

But how is an open, read-only S3 bucket worse than a read-only HTTPS site hosting exactly the same data?

The only thing I can see is that it is much easier to make it writeable by accident (for HTTPS web site or API, you need quite some implementation effort).

[ Parent | on HN ]
Re:TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and P... by wkat4242 on Saturday December 20, 2025 @08:26PM (#46341385)
No wait I agree with you. I think it is bad framing as "S3 open bucket" when people would totally understand an open website :)
[ Parent | on HN ]