TLDR Tech / InfoSec
Now You See mi: Now You're Pwned
TASZK Security Labs' investigation into the Xiaomi C400 smart camera exposed three vulnerabilities in the miIO setup protocol: an authentication bypass during the handshake, a cryptographically weak Pseudo-Random Number Generator (PRNG), and a heap buffer overflow leading to controlled heap metadata corruption and reliable Remote Code Execution (RCE) via Wi-Fi. By exploiting protocol design flaws and allocator behavior, an attacker within radio range can gain root access, establish a persistent 'cloud jailbreak,' and redirect video/control through self-hosted infrastructure while firewalling Xiaomi's cloud.
Read the full story