Security Camera Firmware Exposed GitHub Admin Token and DoD IP Addresses

My security camera shipped a GitHub admin token in its login page

While investigating Hanwha Vision security camera firmware, I discovered a hardcoded GitHub admin token embedded in the login page source. This token granted access to hundreds of repositories due to a build error that leaked the entire CI environment. The firmware also contained unexpected IP addresses assigned to the US Department of Defense, raising questions about the company's internal infrastructure. I reported the issue, and Hanwha revoked the credentials within twelve hours.