TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy

Re:TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and P... by locknitpicker on Saturday December 20, 2025 @04:19AM (#46334718)

> Nobody tell them about Linux!

The blogger will blow a gasket when they discover that the likes of GitHub provides access to both installers and software. A hacker's candy store!

[ Parent | on HN ]

Re:TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and P... by evilsocket on Saturday December 20, 2025 @12:40PM (#46337940)

Do you people realize that there's a big difference between open source and proprietary technologies right?

[ Parent | on HN ]

Re:TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and P... by tyami94 on Sunday December 21, 2025 @10:46AM (#46345629)

Doesn't matter really, keeping blobs hidden doesn't actually do anything except make it slightly harder to analyze the software. Making all blobs easily and readily available is exactly what I want the vendor to do. Black boxes don't make things secure.

[ Parent | on HN ]

Re:TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and P... by evilsocket on Sunday December 21, 2025 @11:33AM (#46345997)

Agreed 100%, never said the opposite

[ Parent | on HN ]

Re:TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and P... by plugger on Monday December 22, 2025 @12:37AM (#46351662)

This blogger is the author of bettercap, safe to say they're fairly across Github

[ Parent | on HN ]