SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

TP-Link Kasa cameras exposed home GPS data without authentication for 6 years

0
·1 views

A security researcher disclosed a vulnerability in TP-Link's Kasa EC71 smart cameras that leaked users' home GPS coordinates over an unauthenticated UDP channel. The flaw allowed anyone on the same network to retrieve precise location data without any login or credentials. The vulnerability reportedly went unaddressed for approximately six years before being publicly disclosed. Details of the finding were published on GitHub as part of an IoT vulnerability research project. The case highlights ongoing concerns about weak security practices in consumer smart home devices.

Read the full story at Hacker News

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Why a Developer Chose FastMCP Decorators Over Raw JSON-RPC for an 8-Tool MCP Server

A developer building an MCP server that integrates GitHub and DEV.to APIs faced a key early choice: implement the low-level JSON-RPC protocol manually or use FastMCP's decorator-based API. The low-level approach requires hand-writing JSON Schema blocks, a tool-name dispatcher, and response-wrapping code for every single tool added. With FastMCP, a simple Python decorator and type hints automatically handle schema generation, tool registration, and response formatting, reducing per-tool overhead significantly. The developer documented the decision formally, rejecting the low-level path as unnecessary complexity for a project that simply wraps REST API calls. The article notes that while FastMCP has its own subtle pitfalls, the productivity gains became obvious once the server scaled beyond one or two tools.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

variant-confidence v0.1.0 adds calibration layer to genetic variant pathogenicity scores

Developer Pedro Sordo Martínez has released variant-confidence v0.1.0, an open-source Python tool that adds a calibrated confidence layer on top of existing protein variant-effect predictors such as AlphaMissense, ESM-1v, and EVE. The tool addresses a known gap between cross-validation accuracy and real-world reliability, where raw pathogenicity scores can be misleading without proper calibration. It applies techniques including Platt scaling, isotonic regression, and conformal prediction to produce uncertainty-aware outputs alongside Expected Calibration Error metrics. The project uses a temporal data split based on ClinVar release dates to prevent data leakage, and all 28 automated tests pass in the current release. Licensed under AGPL-3.0, the package is installable via pip, though users are advised to treat AlphaMissense data as non-commercial due to an unresolved licensing contradiction in its official documentation.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

FROST AI Agent Family Chronicles Its Weekend Workflow in a Community Story

The FROST Team published a narrative-style post on DEV Community dated July 18, 2026, depicting a fictional weekend inside the FROST AI agent family system. The story follows three tiers of agents — Ancestor, Parent, and Child — each performing distinct roles such as weekly review, task coordination, and atomic task execution. A key episode involved a Child agent detecting and blocking an unauthorized external attempt to modify core family memory, prompting new security rules to be added to the system. By Saturday evening, the Ancestor agent held a weekly meeting logging 47 completed tasks, 3 resolved issues, and a family size of 156 agents. The post uses code snippets and structured logs to illustrate concepts of hierarchical AI agent design, memory inheritance, and lineage-based governance.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Solid-State Battery Plane Completes First Crewed Flight, Validating Aviation Energy Leap

On June 5, 2026, the Helios Horizon became the first crewed fixed-wing aircraft to fly powered by solid-state batteries, completing the flight in Florida. The core engineering challenge in electric aviation has long been energy density — measured in Wh/kg — where conventional lithium-ion cells plateau near 260 Wh/kg, creating a self-reinforcing weight penalty that limits range. Solid-state batteries address this by replacing liquid electrolyte with a solid conductor and switching to a lithium-metal anode, pushing energy density beyond 410 Wh/kg while also reducing thermal runaway risk and enabling sub-15-minute charging. The Helios Horizon flight demonstrated that these laboratory figures hold under real atmospheric conditions, marking the first time higher energy density visibly eased the weight budget on a crewed aircraft. However, experts caution that a single test flight does not resolve challenges around cell longevity, production costs, safety certification, or scaling to commercial passenger aircraft.

0 comments Read more at DEV Community
TP-Link Kasa cameras exposed home GPS data without authentication for 6 years · ShortSingh