Telnet and Root on the Sercomm iCamera2


A web browser displaying the message "Open Telnet Daemon successfully!"

tldr; URL http://[IP]/adm/file.cgi?todo=inject_telnetd Telnet username root Telnet password Aq0+0009 History Four years ago to the day, I wrote an exposé of the hideous security failings of Sercomm IP Cameras. The blog has since attracked 200 comments - as people try to unlock their cameras, and find out what flaws they have. Despite my best efforts […] Read More

Noli scribere Latine imaginem describere


Screenshot of the Post Office website showing lots of seemingly unrelated pages

When I'm bored, I like to search websites for the "Lorem Ipsum" placeholder text. It's a quick way to find discarded pages and test content. I was particularly confused that the UK's Post Office had a dozen pages containing that little Latin phrase. A quick dive into one of the pages, found this enlightening snippet […] Read More

Renault's Secret Mileage API


Website showing my car and its mileage

Last year I reverse engineered Renault's Electric Car API. One of the curious omissions was mileage - it just doesn't appear there. However! All is not lost. If you log in to your Renault Account - https://www.renault.co.uk/my-account/my-car.html - you'll get details back about your car including its make, model, date of next service, and mileage! […] Read More

Don't Cover Your Webcam's LED


Just a quick note on a mistake I see people making. Webcam covers are a cheap and easy way to prevent your laptop's camera from spying on you. But too many of the covers obscure the LED which indicates that the camera is on. If you cover your activation LED then you won't be able […] Read More

Clarity is antithetical to authenticity


Screenshot of the video in grainy black and white

Digital technology allows us to seamlessly share media with no degradation. Well, that's the theory - the reality is more complicated. This low quality gif is doing the rounds again. The HD version is easily available - but there appears to be something more "real" about low quality. It keeps being shared on social media […] Read More