[geek_slop]

I have reviewed the code and indeed, it is fairly well written. Definitely a professional coder. Not sure if they would have to have a deep understanding of the firmware though. Busybox is linux based and that's all they needed to know. I also think the problem would be fairly easy to fix albeit, through unconventional channels. If it can be hacked, it can be patched and locked down, probably using the same code that the attacks are based on.

[rajangdavis]

Can you share the code? I am curious to see the what kind of attack vectors were applied.

Having enough product knowledge to be able to exploit the specific firmwares is what I meant by a deep understanding of the firmware.

My hypothesis is that either the person spent some time working out which cameras to attack, they had previous experience within the surveillance industry, or they did research on common network recorder exploits.