Eric Park revisits a low-cost Tuya-based IP camera that previously resisted attempts to provide a local video stream. The aim is to find out why the camera’s built-in ONVIF and RTSP services are disabled, and whether they can be enabled without relying on Tuya’s servers. Rather than immediately asking an AI system to reverse-engineer the device, Park starts by examining its firmware. Extraction reveals a Linux 3.4.35 kernel, dating from 2013, alongside the camera’s filesystems and startup scripts.
Tracing the startup process identifies ppsapp as the main application. Searching its strings confirms that it contains ONVIF configuration fields and RTSP URL templates, including paths for two video channels, so the streaming functionality appears to exist in the software. Park then opens the ARM binary in Ghidra and locates code that reads tuya_config.json, including the onvif_enable setting and an ONVIF password. This suggests that the earlier attempt to change the firmware’s configuration may have failed because editing the image damaged a checksum, rather than because the option was ignored. At this point, however, the investigation has not established which port the service uses or whether changing the setting will actually open the stream; the binary analysis is still underway.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Hungarian investigators uncovered $19.5 million in cash hidden in buildings and buried in forests during a corruption probe. Former development minister Miklos Sesztak is suspected of taking more than $37 million in bribes and kickbacks under Viktor Orban’s government. (aljazeera.com)
An Israeli airstrike on Nasser hospital in southern Gaza killed six people, including a surgeon, and wounded 28, the hospital director said. Israel said it targeted Hamas fighters; the strike damaged one of Gaza’s few remaining medical facilities. (theguardian.com)
Quahuru is a two-player dice strategy game played on a six-spoked wheel, where players race pieces to safety and use others to block their opponent. It features a neural-net computer opponent, tutorials, and browser and free Android versions. (quahuru.com)
An Nvidia director reportedly sold nearly $1 billion in stock weeks before a scandal involving Jensen Huang. The provided page contains no details about the sale or the scandal. (finance.yahoo.com)
The FAA issued a nationwide ground stop after a communications issue affected all air traffic control centers. The disruption delayed flights, while planes already airborne continued to their destinations. (washingtonpost.com)
The FAA canceled its nationwide ground stop at 01:19Z on November 14, 2026. The stop had applied to all destinations and facilities. (fly.faa.gov)
Today's best Hacker News stories, summarized and screenshotted, one email a day.