My security camera shipped a GitHub admin token in its login page

The thread discusses the alarming discovery of a GitHub admin token hardcoded in a security camera's login page, sparking debate over who is responsible for such lapses—the camera manufacturer or the open-source project it used—and highlighting widespread failures in secret management and supply chain security. Commenters argue that this is a symptom of a broader industry lack of automated secret scanning in CI/CD pipelines, with some blaming rushed development cycles and others pointing to the need for better tooling.