Thread by @_MG_

THREAD:
Remember that insane security situation with @FootfallCam? Well, it just got even crazier. It’s scattered everywhere, so I’m going to collect it all in a single thread for your reading enjoyment.

(I’m saving the punchline for the last post)

Let’s start with...
1/n

...a quick recap: FootfallCam is a people counter meant for public spaces. @OverSoftNL did a security review and found a never ending can of worms.

Inside the unit was a Raspberry Pi:

2/n

https://twitter.com/oversoftnl/status/1357297972602679300

Inside the Pi is what appears to be a dev’s home directory, with indicators such as a Bruno Mars mp3 ripped from youtube.

Read the rest of @OverSoftNL’s thread for horrors like sql & bash history files, @FootfallCam’s corp wifi creds, “SpermBankRaw”, etc.

6/n

https://twitter.com/oversoftnl/status/1357298938907353088

They also included VPN secrets for what is probably a network full of sensitive info protected by a fragile eggshell.
7/n

https://twitter.com/oversoftnl/status/1357631968968658944

... which brings us to today. @FootfallCam asked for a consulting offer from @OverSoftNL.
They immediately called it “extortion” and made an army of twitter sock accounts

8/n

https://twitter.com/OverSoftNL/status/1359419054067482626

They actually filed false fraud reports with the police. (@OverSoftNL was contacted by the police & all seems fine) and have been spamming it on every post they can find.

9/n

And then @FootfallCam starts taking this approach with their sock accounts

10/n

So many obvious attempts at bullying. It’s clear that @FootfallCam has a fragile ego, also protected by an eggshell, and doesn’t know when to stop (it’s a pattern with snake oil salesmen).
But lost in the noise is this gem:
11/n

The page was immediately deleted by @FootfallCam, but the internet doesn’t forget.
A negative “employee review” with personal contact info, on the company site!
Would be a shame if someone interviewed this guy to see what it’s like inside the company.

12/n

That was the end, but it looks like people are finding a web of sock accounts and products tied to this company. @cybergibbons did a quick dive:
13/n

https://twitter.com/cybergibbons/status/1359565146553778182

I am sure these companies are just thrilled to be listed as customers of @FootfallCam
14/n

I went digging some more. What @cybergibbons started finding will eventually show that Edward & Melissa are married. Yeah, he is using his personal account and his wife's to make his sock puppet accounts.

15/n

But FootfallCam is one of many properties that falls under Meta Technology, also belonging to Edward:
metatechnology.co.uk/Home/About
Yep, there is also a Nursery Cam, dating app..... and even a complaint app (you can't make this up).
16/n

Now, I am sure the other properties are just as much of a dumpster fire, but the way Edward put his employee's negative "review" on the public site had me interested. So I looked up their glassdoor profile and... its horrible to nobody's surprise
glassdoor.com/Overview/Worki…
17/n

I reached out to a few of the employees. It seems Edward was using these "reviews" to retaliate against glassdoor reviews, and its not the first time he has done it. There is also an alleged legal complaint open against Edward for this.
18/n

I highly suggest some press look a bit deeper because there is a group of dozens of Meta Research ex-employees who are trying to figure out what to do. They saw lots of ugly things inside the company that are probably outright illegal.
19/n

This situation is about to get the attention it deserves.
While we wait, you have to appreciate that Meta Research also makes the app called weComplaint. One would say that it is pretty.... meta! :P
Look at that product description:
20/n