Come to think of it, I only used my credentials in the iOS LiveCam Pro app and when I tried the web based firmware controls. Using VLC, I didn’t enter any passwords. Maybe these things aren’t very secure at all.
UPDATE; Okay, I tested it by removing the credentials from iOS app and the stream still works so for local access, there’s no security! I have not been able to view it from outside of my network.
When I use their app, I don’t have much of a lag at all, it’s almost realtime. There is however, about a 2-3 second lag when I simultaneously view the image on VLC. The app itself is very fast.
The username and password are embedded in the url which is about as insecure as you get. Probably not a good idea to do port forwarding to make it available from the outside world unless you are purposely sharing with the world, and in that case, use a username and password that you don’t mind everyone seeing.
That said, it is a fun device. Has anyone found the endpoints for controlling it through http? I started looking but didn’t find anything yet.
I have one of these. But it has too much delay when I try to control over cloud servers. So I want to test through direct IP connection.
Is there any way to find a browser with Quicktime support ?
Any quicktime supporting browser on android ?
I could not solve the delay issue. I asked the provider to supply me cloud server software for running on my own server. But they could not provide it.
I also asked for a modification on the client app so that it accepts direct IP-port connection.
They also rejected that request.
Now I am looking for a firmware modification possibility. Is there a community/forum where I could discuss these ?
I’m sorry to hear that you’re experiencing lag when you use the Robo Buddy. I’ve experienced 3-4 second lag a few times and it becomes impossible to control. I’m not aware of any robust support group or anyone trying to hack into the firmware. These things are more like toys, kinda like a toy drone with a camera.
It seems like it should be possible to do local control/streaming. Since the device can create it’s own wifi network and allow local control, I was thinking about trying to use a raspberry pi or something along those lines to try and bridge the device wifi network to my local network so that one could VPN into the local network and access the camera/controls from the app that way. This idea seems like it might work in theory but is somewhat above my current implementation knowledge level.
@mrmrmrmr
I’m wondering if you might have some WiFi interference that’s causing your lag like when a microwave turns on and causes problems with the 2.4ghz frequency? Also, do you know your upload speed? Most ISPs provide a much lower upload bandwidth. For example, I know that mine is 50/5 so I can download at relatively high speeds but my upload is only 5mbps so just barely adequate. You can test your network speed with an online utility such as http://www.speedtest.net/
Sorry to hear your guys issues. Mine works pretty well. Local control is pretty good and even cloud is drivable if I use caution. It’s a neat little toy.
I don’t think my connection is the limiting factor- I work through my VPN to home remotely every day, and can view more than one 1080p security cam stream easily without stuttering. Don’t have many devices on my 2.4Ghz network, not having problems with 4x Fabriq speakers on the network, but that’s a thought. Thanks for the suggestions, will keep playing around.
It would be nice if it worked well enough to act as a remote “sentry” bot to drive around the house when there’s a (hopefully) false alarm in one of the zones/motion detection/etc.
Actually I don’t have any issue with the Wifi, because when I use the same connection from within the same LAN (both the robobuddy and my phone connected to home Wifi accesspoint) , there is no delay.
Also, there is no problem with my upload/download limits. My upload is over 5Mbit/s and I can stream video with this upload. I don’t believe that this device requires more than that for streaming. It has options from 128k to 800k on the app.
Besides, I checked the RTP IP of the cloud server they are using. Even with ping packets I get 20% to 40% packet loss.
So this is absolutely a problem on the cloud server. And I don’t need cloud. I wish they had an option on the app for direct IP and port connection.
Well I am looking for an easier to implement solution.
For example, adding a “direct IP address and port” input on the mobile app would help me to bypass cloud server.
Or, if I could find the server software, I can run the server on my own host. And change the setting on the device to connect my server.
Btw, does anyone know the telnet password for the device ?
I don’t know if this helps, but at post 16 above, we were able to find a local IP address and view the livestream via RTSP protocol. I don’t know how you would control the thing though. There is an obsolete non-working web interface, perhaps looking at the source might help give some clues.
well I am able to get flowing stream with no delay directly from the rstp address if I map the port to the external port of my modem.
but I also need a control action. so I believe if I can reach the telnet server on the thing, then I can write a mobile app to control it diretly bypassing thee cloud.
I believe just reaching the telnet would be ok.
any ideas about the telnet user and pass ?
I know I’m late to the party on this device, but I just purchased one this week. It has been a lot of fun for not a lot of money!
Has anyone learned any more about hacking this little device? I was able to telnet into the device using the credentials MrRobot posted, but was not able to successfully access any web page or rtsp feed.
nmap shows that there are two ports open, telnet and “jetdirect” which upon googling is related to HP printers. Maybe that’s the port used for controlling it outside of the LAN?
Nmap scan report for 192.168.1.114
Host is up (0.021s latency).
Not shown: 998 closed ports
PORT STATE SERVICE
23/tcp open telnet
9101/tcp open jetdirect
I’m hoping to be able to figure out how to access the web page, and anything else that might be available. If the page is hosted inside the bot, it might be possible to modify that page and make it use HTML5 instead of Quicktime by telnetting in and editing the page. I haven’t done much digging there but a quick look did not reveal any kind of webserver running on the bot.
Hi Jimxenus, glad to see that you’re still around. Did you know that this thread is literally the only place on the internet that contains information about hacking the RoboBuddy? It’s too bad more of these didn’t sell, because it is a very fun device.
Can I ask what URL you used to access the web interface on the device? I tried http://192.168.1.114 (The LAN IP address of my bot) but nothing came up.
It seems hard to believe that there might have been a firmware update since 2016. According to the information given upon logging in via telnet, it looks like the device is running a version of BusyBox from 2015.
BusyBox v1.16.1 (2015-09-16 13:52:08 CST) built-in shell (ash)
Enter ‘help’ for a list of built-in commands.
Welcome to HiLinux.
None of nfsroot found in cmdline.
help
Built-in commands:
. : [ [[ alias bg break cd chdir command continue echo eval exec
exit export false fg getopts hash help jobs kill let local printf
pwd read readonly return set shift source test times trap true
type ulimit umask unalias unset wait
