Original IP Camera module has a bunch of known vulnerabilities. You can read great article about that here. Based on the same chip with the same Firmware.

Found hardcoded accounts:

System account etc/shadow
root:FCb/N1tGGXtP6:10957:0:99999:7:::
root 059AnkJ - so you can SSH into this thing.

App accounts usr/ipcam/bak/login.cgi
var loginuser="admin";
var loginpass="MTIzNDU2"; (123456)

get_params.cgi
var user1_name="admin";
var user1_pwd="jgmgqb0lXu";
var user2_name="operate";
var user2_pwd="p8e6t1s3";
var user3_name="visit";
var user3_pwd="p8e6t1s3";
var dns="user.jiake.info";
var dns_port=80;
var dnsuser="F162997";
var dnspass="35944532";

By the way, Android app has a check if your phone is rooted or not, ask yourself for what reason?? ;) Almost all code is obfuscated.

• "Cloud" is just a PHP script on some server. So I don't know how long it will stay online.

• You don't have access to any functions of your device without that "cloud", or even from LAN when internet is disconnected.

• Device can't record videos automatically when scheduled feeding started. You can only watch your cat in real time. It is not very convinient when you on vacation for example and just want to know whether your cat ate or not.

That said is enough for me to decide to throw out original camera module and replace it with Raspberry Pi Zero W and my own server software.

What you need to buy:

• Raspberry Pi Zero W Banggood link
• Camera module for Raspberry Pi Banggood link (or similar without IR LEDs)
• Longer ribbon cable for the camera Banggood link
• DS3231 real time clock module for Rpi Banggood link
• USB Sound card for Rpi Banggood link
• 8002 mono sound amplifier (same as on original camera board) Aliexpress link

• Reverse engineering of UART protocol of the ZEN3309A microcontroller to be able to control device from the Rpi ✅
• WebRTC support (p2p 2-way video and audio) (in progress)
• Progressive web app on Vue.js (in progress)