Micah Lee: Hard-coded API token that Flock cameras use to identify themselves and get OAuth credentials, which can then be used to talk to Flock's production servers.

m-p{3}@lemmy.ca · 7 days ago

Micah Lee: Hard-coded API token that Flock cameras use to identify themselves and get OAuth credentials, which can then be used to talk to Flock's production servers.

kibiz0r@midwest.social · 6 days ago

Unique private key per device, pre-provisioned certificate at manufacturing time, hardware-level separation of crypto operations so sensitive creds are never in memory.

It’s a bit more expensive to manufacture, in terms of BOM and logistics. And then you have a lot more complexity to your production system too.

Victor@lemmy.world · 6 days ago

Is it possible to have several private keys per singleton public key?

kibiz0r@midwest.social · 5 days ago

Micah Lee: Hard-coded API token that Flock cameras use to identify themselves and get OAuth credentials, which can then be used to talk to Flock's production servers.

Micah Lee: Hard-coded API token that Flock cameras use to identify themselves and get OAuth credentials, which can then be used to talk to Flock's production servers.

Micah Lee (@micahflee.com)