Leo, a night-shift sysadmin with too much coffee and not enough to do, stumbled upon the link while auditing the logs. Most of the "secret" files he found were just old backups or memes from 2012, but this one felt different. It was 4GB, encrypted, and dated from the night the company's main laboratory had gone dark.
In its default, out-of-the-box state, early versions of WebCamXP did not enforce password protection on the streaming endpoints. Even when passwords were enabled for the "Admin" panel, the "secretary" viewing portal was often left unauthenticated under the assumption that obscurity (not linking the page publicly) was sufficient security. my webcamxp server 8080 secretrar link