You want RSTP without flashing firmware, you got it - but not thanks to wyze

[Customer]

@cheeroip

just think that it is very bad practice to ask users to let a 3rd party service use their Username and passwords to simulate access to a private server.

There is no “service” using it. There is no TinyCam server involved. It’s your Android device logging in with your Wyze credentials. He may or may not be copying them elsewhere - he says he’s not. I suppose network packet captures could confirm this.

@cheeroip

Seem to be a russian dude on a working VISA in USA that sorta reverse engineered Wyze login or he had access to leaked code?

I don’t know any details but as far as I determined the Wyze reverse engineering was performed and open sourced by an independent group, and Alexey merely used it in his existing product.

RTSP for V3

My apologies, all this time I had credited Alexey directly for the reverse engineering effort. Apparently that credit goes to a team led by Nicolas Boulet-Lavoie, and Alexey simply implemented it.

@cheeroip

I think at time Wyze was using a ridicule scheme using phone IMEI to authenticate users.

I don’t even know what you mean but SMS is still a valid method for the optional* Wyze 2FA.

@cheeroip

That’s the reason why Tiny cam was only working on phone with the official APP installed.

Again, not an issue unless you’ve enabled 2FA.

@cheeroip

Then Wyze hired the dude for like 6 months while, at same time, was selling his own service in direct competition with Wyze cloud.

This is true from what I have heard. I too don’t know any current status.

@cheeroip

My assumption is that that bride get the all the stream from Wyze servers and not just “authenticate for the handshake” (why would it need the authentication for?)

At least TinyCam just mimic the Wyze app so the load was acceptable but that bridge SEEM to run a local server that access EVERY CAM 24/7 from Wyze servers.

Nope. You know how I know that? Because Wyze servers don’t GET any video feeds to begin with, unless they are being fed event recordings on a CamPlus plan. Even for live viewing, the streams of video go from camera to viewing device, not to Wyze servers. So the various open source projects wouldn’t have any way to access every cam’s stream 24/7 by downloading from Wyze servers. That’s just not how their P2P works.