Unit cam S3 unsafe poster
-
Hello, the current mode of image poster is unsafe, anyone can access the eazy data generated urls using mac that is of another people. Please keep the webserver on after enable the poster and make an authentication process to the access. A simple password field in configurations to concat in url is better than the totally open current approach
-
@johseffer Have you set the ezdata stream to private?
Ezdata isn't a full service, it's a test service. if you need a more secure service its time to move on to AWS or Azure. -
Make camera data repository with public url pattern like this sound like a bad idea to me.
https://ezdata2.m5stack.com/ECDA3B507E5C/captured.jpg
https://ezdata2.m5stack.com/ECDA3B507E4C/captured.jpga simple script can dump every unit photos from url, the first time i opened my url i get a photo of an M5Stack team member inside the factory, for an example.
Sound like a bad approach when we talking about security, even if in a development environment.
-
@ajb2k3 i'm still rewiring the firmware above to use AWS s3, but will be good if the documentation can provide some example about that.
More detail about that process can make the unit more noob friendly like ESP-CAM and another projects
