Wyze Random notes

No public API
Official Client use a pretty pedestrian API
https://api.wyzecam.com:844.
The API seem to have no problem accepting requests from unofficial clients (TinyCam) using Wyze credentials.
Interesting note: Wyze customers don’t seem mind giving their username/password to an unauthorized 3rd party.
Usual unofficial GitHub
https://github.com/nblavoie/wyzecam-api
TinyCam developer (alexey.vasilyev) is an active reddit user and point to nblavoie GitHub

Some RTPS support for some of their camera
https://blog.12security.com/wyze/

https://www.facebook.com/WyzeCam/

https://forums.wyzecam.com/

https://www.inputmag.com/tech/consulting-firm-alleges-wyze-data-breach-affecting-24-million-customers

https://twitter.com/WyzeCam

Hardware:

Wyze V2 camera (aka NEOS Smartcam)
Original hardware [Xiaomi hardware Xiaofang 1S]
Wyze Pan camera (aka NEOS Smartcam)
Original hardware [Xiaomi hardware Xiaomi Dafang]
Seem Wyze and Neos just rebrand Xiaomi devices.
Both Wyze and Neos don’t seem to add any value and have 0 R&D.

Usual unofficial GitHub
Alternative “hacked firmware” :
https://github.com/EliasKotlyar/Xiaomi-Dafang-Hacks
I suspect Wyze “RTSP firmware” share the same code.
Not idea what is the original source.
I suspect the classic China manufacture “leak” and that’s the reason why Wyze can’t officially support it.

Kingsoft

A substantial amount of the videos taken with Wyze in the United States have been exfiltrated to China for study and distributed to a variety of companies in the mainland. Many are involved in the healthcare space, such as iHealthLabs.

Wyze cameras automatically begin scanning a users network environment once plugged in and begin initiating a series of automated hacking attempts against devices in a user’s home.

All Wyze devices allow Wyze, or anyone who has accessed their database within the last 10 months, to SSH tunnel into the devices from anywhere in the world.

It jams its tentacles into your eyes to see what you see, into your veins to know how you feel, and finally crawl into your brain to be aware of everything you hear and ultimately to infer whatever you think, could consider, or have done.

April 3, 2021

zMap

https://zmap.io/

The ZMap Project

The ZMap Project is a collection of open source tools that enable researchers to perform large-scale studies of the hosts and services that compose the public Internet.

April 3, 2021April 3, 2021

WORK prospect

Honeywell look like an interesting company to work with./for.

https://www.linkedin.com/company/honeywell/life/f1fdbfc0-f17d-4c07-91f5-11e06b38559b/

April 3, 2021

Ambient Weather progress

Going outrun for the Ambient Weather dashboard update:

I’ll try to see if the Microsoft Store can support a “Bundle” and give every application of the “family” for free to whoever buy at least 1 version.

Quite happy with the NOAA forecast routine. I could make a separated app

April 3, 2021April 3, 2021

Web Utils

Diagrams.net

https://github.com/jgraph/drawio-desktop/

March 4, 2021March 7, 2021

UWP and output to console

Debug.WriteLine

Debug.WriteLine(string message);

debug.writeline is slow and not very multithread friendly:

in an async/await situation:

Device.BeginInvokeOnMainThread(() => Debug.WriteLine(response));

LoggingChannel

High frequency very low overhead loggin:

inside the OS kernel

private readonly static LoggingChannel _channel = new LoggingChannel("AWWIDGET",
    new LoggingChannelOptions(),
    new Guid("42ccd433-b1fe-4274-8163-51716821eb39"));

_channel.LogMessage("hello from UWP!");

and then Traceview.exe the GUID

March 1, 2021March 1, 2021

Microsoft communities

I’m being checking all those Microsoft internal forums/communities/events for ever and I never being able to find them productive.

I always have the impression that they are not there to be useful.
Microsoft have literal Billions of users and they actively promote those communities and still they are depressing desert most of the time and they don’t produce anything useful.
Google, or even Bing, rarely return any valuable result from those places, it’s always stack overflow or some personal blog.