I made some progress: Running code from a micro SD card as root Downloading camera firmware Writing custom firmware patches Finding the root password hash Changing the root password…

You can remotely pan/tilt the camera so it points away from the crown jewels while you move in to steal them…

At SecTalks, blinken ran a Hardware Hacking 101 session where we investigated a Chinese IPcam “WiFi Smart Net Camera” v380…