From d49be1b9336c30233b1d45423550dbaf3bd649a8 Mon Sep 17 00:00:00 2001 From: Michael Mainguy Date: Sat, 19 Sep 2026 18:32:29 -0500 Subject: [PATCH] vrek: correct the lock theory, the web account was deleted The later 401s are explained by the account no longer existing, so the illegal-login-lock hypothesis is withdrawn. The HTTPS refusal observed while the account worked over HTTP still stands unexplained. Co-Authored-By: Claude Opus 5 (1M context) --- .vrek/log.ndjson | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.vrek/log.ndjson b/.vrek/log.ndjson index d87e1cd..ad81c78 100644 --- a/.vrek/log.ndjson +++ b/.vrek/log.ndjson @@ -992,3 +992,8 @@ {"id":"evt-7e1estxqp6zv","type":"edge.added","subject":"fnd-0b0q7xw","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"informs","from":"fnd-0b0q7xw","to":"gol-6q1q5mr"},"at":"2026-09-19T23:30:53.723Z","parents":["evt-bwt21kmnwevq"],"hash":"d677fee3803b51c9db624bf64fd12b6aaf02652d29c8b7d195c67ae731dbab12"} {"id":"evt-mpvp081sd401","type":"node.updated","subject":"iss-aret59y","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"patch":{"attrs":{"revisit":"2026-09-20","deferred_because":"User asked on 2026-09-19 for a reminder tomorrow: the camera's login lock from today's failed HTTPS attempts needs to expire before testing again, one attempt at a time, starting with the sessionLogin theory."}}},"at":"2026-09-19T23:30:56.101Z","parents":["evt-7e1estxqp6zv"],"hash":"6f8e43c0e73d650e648c2182ade62f998d8371a75bdeb24bbf6d98c29fe0a1e8"} {"id":"evt-jjb91xaqzfh8","type":"node.status_changed","subject":"iss-aret59y","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"from":"open","to":"deferred"},"at":"2026-09-19T23:30:56.103Z","parents":["evt-mpvp081sd401"],"hash":"91475111219c80eca4cd67e727da928b0925436019ef3349566a492331613ad3"} +{"id":"evt-ss3akqh6yz7p","type":"node.created","subject":"fnd-5etg00n","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"finding","title":"The web account was deleted, so the later 401s were expected; the HTTPS refusal seen while it existed still stands unexplained","body":"Correction to fnd-0b0q7xw, recorded 2026-09-19. The user deleted the purpose-made web Operator account on camera …af2e, so requests with it now fail with 401 whatever the protocol, and the \"illegal login lock\" hypothesis for those later failures is unsupported. What still stands, because it was observed while the account existed and worked over HTTP: HTTPS on 443 answers with the same digest scheme and realm as port 80, yet the same credentials were refused there, across plain digest, anyauth, basic, Connection: close and TLS 1.2. What is now unknown: whether a lock ever occurred at all. The app was never affected, since it authenticates with each camera's separate ONVIF account, which is also why the dashboard kept working throughout. To resume the TLS investigation (iss-aret59y) a web account has to exist again on a camera; alternatively camera …af54, whose ONVIF account ISAPI does accept, can be used without creating anything new. Also worth noting for hygiene: the deleted account's password had been shared in conversation, so deleting it removed that exposure.","status":"current","owner":"prn-q80g8mz","attrs":{"sources":[{"node":"iss-aret59y","note":"User's statement that they deleted the account, plus one confirming request that returned 401"}],"as_of":"2026-09-19"}},"at":"2026-09-19T23:32:17.241Z","parents":["evt-jjb91xaqzfh8"],"hash":"5dd57916c789d1ecc66af5ba2b9066109ff49f3f46c498a5872ad84c39785bc5"} +{"id":"evt-71gb7p0p0g38","type":"edge.added","subject":"fnd-5etg00n","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"informs","from":"fnd-5etg00n","to":"iss-aret59y"},"at":"2026-09-19T23:32:17.242Z","parents":["evt-ss3akqh6yz7p"],"hash":"bcf63df26c2780a4be305880583f3bf3813fe1c0a1091dc45aa20a8f02aaae48"} +{"id":"evt-0ghcbqs4gg45","type":"edge.added","subject":"fnd-5etg00n","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"informs","from":"fnd-5etg00n","to":"gol-7ajfexk"},"at":"2026-09-19T23:32:17.243Z","parents":["evt-71gb7p0p0g38"],"hash":"17a09c89781685cdfb9206cbf5728e0fbcb9a82f1f5836a7b9dd6b16117f267e"} +{"id":"evt-6bb4da2h9bp0","type":"edge.added","subject":"fnd-5etg00n","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"supersedes","from":"fnd-5etg00n","to":"fnd-0b0q7xw"},"at":"2026-09-19T23:32:17.244Z","parents":["evt-0ghcbqs4gg45"],"hash":"a317e3cb4ceb1b662a373db747d6eaa8156b589294b75638aafd34ff2b792b8b"} +{"id":"evt-ek78k490qg8w","type":"node.status_changed","subject":"fnd-0b0q7xw","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"from":"current","to":"superseded"},"at":"2026-09-19T23:32:17.245Z","parents":["evt-6bb4da2h9bp0"],"hash":"a5692d573786b1316bf02bf1d6f85f8d2b4c002bceae2f7d418525ebd6406ec9"}