Many owners leave the factory-set username and password (e.g., "admin/admin") unchanged, allowing anyone to bypass the login.
The presence of these exposed feeds stems from a legacy issue in the internet of things (IoT) ecosystem: . inurl viewerframe mode motion my location