Liberate the bees — AdaCam firmware toolkit, recon, and liberation scripts
Find a file
Kayos 9c4b0e26b9 docs: security hardening plan v1.0
Addresses all 4 open CVEs with specific implementations:
- CVE-2: Per-device WiFi password derived from serial/MAC + salt
- CVE-11: SSH key-only auth, ADACAM_PUBKEY injection at liberation
- CVE-14: adacam-api bearer token derived from device serial
- CVE-7/16: Kill usb-updater, no OTA for single-owner device

Also covers: firewall rules, tunnel security assessment,
data-at-rest recommendations, priority order for implementation.
2026-03-14 11:27:23 -07:00
recon init: factory recon baseline, HDC-S fw 5.7.88 2026-03-14 08:59:41 -07:00
security docs: security hardening plan v1.0 2026-03-14 11:27:23 -07:00
services/capture refactor: compact services to 223 lines total 2026-03-14 10:58:55 -07:00
CVE-LOG.md docs: CVE-16 — unsigned USB firmware flash (physical RCE) 2026-03-14 10:54:42 -07:00
liberate.sh feat: liberate.sh v0.1 2026-03-14 09:05:17 -07:00
README.md init: factory recon baseline, HDC-S fw 5.7.88 2026-03-14 08:59:41 -07:00

adacam

Liberating bees from the hive.

Toolkit for converting Hivemapper Bee (HDC-S) dashcams into AdaCam devices — feeding AdaMaps instead of Hivemapper/HERE.

Repos

  • adacam-api — Replacement for odc-api (Flask, lean, no CVE)
  • recon/ — Factory firmware baseline recon (HDC-S, firmware 5.7.88)
  • liberate.sh — One-shot liberation script (in progress)

Recon

Factory baseline captured from a fresh HDC-S unit (firmware v5.7.88, Intel ESE Yocto dunfell, kernel 5.10.32). Key findings documented in recon/recon_*.log.

Status

  • Factory recon baseline
  • adacam-api v0.1 (Sulkta-Coop/adacam-api)
  • liberate.sh
  • AP subnet reconfiguration (10.42.0.0/24)
  • Reverse tunnel to Rackham
  • Routing fixes (LTE metric, wlp1s0f0 conflict)