D-Link agrees to new security monitoring to settle FTC charges

[fenderman]

D-Link agrees to new security monitoring to settle FTC charges

 

[mat200]

From TFA:

Specific shortcomings cited by the FTC included:

• hard-coded login credentials on its D-Link camera software that used easily guessed passwords
• storing mobile app login credentials in human-readable text on a user’s mobile device
• expressly or implicitly describing its hardware as being secure from unauthorized access

and

• repeatedly failing to take reasonable testing and remediation measures to protect hardware from well-known and easily preventable software security flaws

 

[bp2008]

I bought a 2 MP indoor D-Link camera once, and cybersecurity was the least of its problems. Look at this INDOOR image quality. This is what you get when it works. The video feed freezes and drops out all the time because the network interface drops packets like crazy. That makes it impossible to upgrade the firmware, and almost impossible to load configuation pages (hence why the camera's built-in timestamp is still enabled and wrong).