My Microscope Is a Dashcam: Firmware Teardown Uncovers Insecure Update Path in Tomlov DM9
Summary
A Tomlov 7-inch device shipped as a microscope is revealed to be a Generalplus dashcam by reverse-engineering its firmware. The investigation shows USB identification, firmware details, and a public Generalplus CVR SDK, leading to the conclusion that the device is a dashcam in disguise. Most critically, the update mechanism accepts any file named gp_cardvr_upgrade.bin with no signature or version checks, creating a serious security risk.