Update README.md

This commit is contained in:
xfarrow 2023-08-24 10:41:42 +02:00 committed by GitHub
parent 43225301cc
commit 408c91694c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 10 additions and 7 deletions

View File

@ -1,11 +1,11 @@
# Tapo camera # Tapo camera
IP Cameras are a nightmare for our privacy. For this reason I am reverse engineering a Tp-Link Tapo C200's firmware and relative app in order to prevent them from sending any data to untrusted servers. IP Cameras are a nightmare for our privacy. For this reason I am reverse engineering a Tp-Link Tapo C210's firmware and its relative app in order to prevent them from sending any data to untrusted servers.
## How these cameras were designed to work ## How these cameras were designed to work
1. You download a proprietary app (Tp-Link Tapo) and create an account; 1. You download a proprietary app (Tp-Link Tapo) and create an account without which the camera can not work;
2. You use said app to instruct the camera to use a specified Wi-Fi AP; 2. You use said app to instruct the camera to use a specified Wi-Fi AP;
3. The camera sends the unencrypted video stream to servers we have no control over; 3. The camera sends the video stream not end-to-end encrypted to servers we have no control over;
4. You have the possibility to update the camera's firmware through its app, and this expands the attack surface for a hacker or from the company itself to push a malicious update. 4. You have the possibility to update the camera's firmware through its app. This expands the attack surface for a hacker or from the company itself to push a malicious update.
## What we can do ## What we can do
As of today, we have libre NVR solutions we can use in place of the proprietary app, but you still need it the first time you boot the camera up and NVRs will not stop the camera from sending the video to their servers without using a firewall. As of today, we have libre NVR solutions we can use in place of the proprietary app, but you still need it the first time you boot the camera up and NVRs will not stop the camera from sending the video to their servers without using a firewall.
@ -13,8 +13,11 @@ As of today, we have libre NVR solutions we can use in place of the proprietary
This repository aims to resolve these issues. This repository aims to resolve these issues.
## What we know so far ## What we know so far
* Tapo C200 runs a Linux kernel (3.10); ### Tapo C200
* Tapo C200 references some OpenWRT code, probably for its network stack. * It runs a Linux kernel (3.10);
### Tapo C210
* It uses a Linux Kernel (4.9.84)
## Download ## Download
There's no stable release yet. There's nothing yet.