hn.today

Tapo (Rust/Python library) now speaks TP-Link's TPAP protocol

mihai.dinculescu.dev113 points51 comments
Screenshot of Tapo (Rust/Python library) now speaks TP-Link's TPAP protocol

Commenters discussed a Rust/Python client for TP-Link Tapo devices gaining support for TPAP, with the author (faithraven) explaining that recent firmware forces third‑party clients off unless a "Third‑Party Compatibility" switch enables an older KLAP login. Faithraven argued TPAP uses SPAKE2+ (RFC 9383) and is cryptographically stronger: recorded KLAP sessions can be tested offline against password guesses, while SPAKE2+ prevents learning past sessions even if the password is later compromised. Faithraven also noted some devices (e.g., a C210 on firmware 1.5.2) still require the compatibility switch, so coverage is not universal. John_strinlai and tecleandor added background on the Tapo brand and device types; mindslight asked whether TPAP restores local‑only control or still requires cloud connectivity.

Responses ranged from praise and gratitude (tclancy, the-grump) to nitpicks about writing style (IshKebab, nilamo) and concerns about potential legal pushback (the-grump). A technical side debate focused on reverse‑engineering tooling: teravor and bri3d described how modern LLMs and MCPs can speed protocol discovery, while Retr0id and faithraven recommended scripting headless Ghidra rather than relying on fragile MCPs; bri3d and teravor singled out IDA Pro’s MCP as better‑designed. Overall opinion split between enthusiasm for the project and differing views on tooling and presentation, with practical questions about cloud dependency and device compatibility left as topics for follow‑up.

Read on mihai.dinculescu.dev51 comments on Hacker News

Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.

More in Programming

Berthd

Berthd

Berthd enables coding agents like Claude Code and Codex to run on your own dev boxes, continuing work even when your laptop is closed. It offers a user-friendly interface for managing tasks, comparing worktrees, and customizing themes, all while running agents remotely and securely. (berthd.app)

The daily digest

Today's best Hacker News stories, summarized and screenshotted, one email a day.