Slashdot Mirror
Kodak Wireless Picture Frames Open To Public
Jaxoreth writes "The Kodak Easyshare Wireless Digital Picture Frame displays images via a per-frame RSS feed hosted by FrameChannel. Each frame's URL is identical except for a parameter matching its particular MAC address, enabling public browsing of users' feeds. And worse, if you reach the feed of a not-yet-activated frame, it gives you the code to activate it, allowing you to preload it with whatever content you choose."
It bloody well would, unless the gaping black hole of goatse man in a million homes across the country qualifies as "defense in depth"...
Havent thought about this for awhile, but IIRC the first three octets are supposed to indicate the manufacturer of the device, so if we can assume the NIC in these frames is always from the same manufacturer, the address space to search becomes much smaller. Still, it's going to be pretty huge, with probably the largest number of possible URLs invalid, and most of the valid ones full of normal junk no one but family/friends really want to see anyhow. The probability of one or two really nice racy pictures in there will no doubt motivate someone to search the space eventually though.
If you see anything good, or even just really strange, be sure and post it here!
=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Friends don't let friends enable ecmascript.
for "the ring ii"
intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
MAC addresses are in no way predictable based on the company producing the product in question, so we should be perfectly safe.
Sarcasm aside, how could they possibly have thought that this was a good idea? Nobody expects Joe Consumer to remember something as hostile as a MAC address, so there isn't a "user convenience" argument to be made, and anything with enough processor power and mass storage to run these sorts of web functions could have gotten away with cramming in an onboard GUID or some certs or something. WTF?
/. effect across the entire product line. Be polite and don''t load them with tubgirl.
How many people will get their brand new frame home, plug it in and find that it displays a "preloaded" goatse
It seems you get an RSS feed with an activation code no matter what you enter for the frameid (it doesn't even seem to have to be a valid MAC address) so it seems they're not filtering on the server for addresses that actually belong to frames
Help me! I'm turning into a grapefruit!
No don't mess yourself up in the first place.
It's called a cloudfeature being so it's not a bug it's a KODAK ;)
Share your memories and your nude girlfriends with your friends, enemies, law enforcement agencies and employers - and clouds[1].
[1]http://www.myspace.com/developerchallenge
This innocent person has posted pictures of children and some recognisable locations. All it takes is for some pedo pervert to fantasise over the pictures and track them down.
If one were a truly awful person, one could probably maximize the damage by going with less horrifying images...
Classic shock site stuff turns the stomach; but, for that reason, is a pretty implausible thing to have show up outside of a hack.
A steady stream of sexual but more or less pedestrian pictures, on the other hand, is a much more plausible thing for somebody who has a little something to hide from his/her family/significant other/doting grandparents to accidentally upload to the wrong location.
For pure nausea you can't really beat the classics; but for pure evil, the more plausible, the better...
And of course, we live in a world where every 13 year old is going to look at this and go, "Sweet! When the next guy buys one of these things, he's going to see pictures of dicks!"
Support my political activism on Patreon.
Some kind soul needs to put together an image that explains how insecure the system is and its ramifications, and upload it to all photo frames.
The really sad thing here is that if some white hat wrote a script to find these and upload to them an image warning the owners of the vulnerability, said white hat would almost certainly get smacked down by a DMCA suit or face civil/criminal penalties. No good deed goes unpunished.
In theory, practice and theory are the same. In practice, they're not.
http://rss.framechannel.com//productId=KD9371/frameId=00:23:4D:B8:07:8a
Girls are strange. They don't come with a man page.
-- Michael Mattsson
1. Play with the MAC address to find a live frame. It took me 4 tries.
2. Scroll down and see if one of their images is the weather forecast, complete with the city and state for the forecast.
3. Now look at the userid. It likely contains a first initial and a last name.
4. City, state, last name, first initial -- that may very well be enough to get a street address.
5. Most people have pics of their family, including their kids. You've got a name, address, and photos of the fam.
It seems to me that goatse/tubgirl -ing these things is the only responsible thing to do. Sure, a few dozen (hundred?) people will have to gouge their eyes out, but it's a small sacrifice necessary to generate consumer push back on this kind of nonsense.
Given how rudimentary and just plain awful Kodak's interface was for their WiFi picture frames from 2 years ago when I bought a few for the family to share the same albums with each other across the nation, this story doesn't surprise me in the least.
I mean, who lets the frame go on the internet and builds in a timer for when to turn the frame off and on at night...but then when it comes back on it ONLY goes to its own internal memory and NOT the last gallery you were viewing via the WiFi?? Every morning you have to reconnect it to the internet galleries...and its ability to cache the pics from the internet is so poor that it will often claim it has an "error" and...REVERT BACK TO INTERNAL MEMORY! It's next to impossible to use it to view galleries on the internet...that can ONLY be on their website...AND that they're now CHARGING you to keep "active"!
So, no, it doesn't surprise me at all that they could screw even this basic security up.
Mordor...a magical, mythical land where women are more rare than dragons--but where every man would rather find a dragon
I was checking some of the links and noticed a few interesting parameters
http://www.framechannel.com/feeds/pair/index.php/r=1/frameModelCode=KD9372/frameModelId=1/frameId=PAPAPA/reset=0/language=en/7072.jpg
See that parameter named reset? I activated an account and verified it as activating. Then I triggered that reset parameter to 1 and it went back to the pre-activation state!
GPG 0x1B479C78
For maximum damage; child pornography. .jpeg equivalent of nuclear weapons.
I'm sure you are all more than capable of imagining the fallout without any further explanation; it's hard to find anything being more of the
Oh, come on. Don't look at the photostreams with remaining eye.
Its sloppy to do, but here's why they did it....
Each device needs a unique serial number, something to identify it. But at the same time, they didn't want to customize the firmware for each device to include a serial number.
So instead, some brilliant programmer observed that the embedded processor can get the MAC address from the NIC and use that as a serial number for accessing the web page.
This is an old and useful trick, but the only problem is although it gives you a unique serial number per device, it gives you a predictable serial number per device and because of the nature of the back-end service, they didn't just need a UNIQUE serial number, but also an UNPREDICTABLE serial number. Ooops.
Test your net with Netalyzr
Can somebody mod this up please?
I like the sound of calling every security problem a "cloud feature". Suddenly it does not sound bad at all anymore!
Nae king! Nae laird! Nae yurrupiean pressedent! We willna be fooled again!
Someone has a new baby (possible NSFW? baby nudity)
Someone recently graduated, and really likes hot air balloons
many random -- changed twice while posting this
Nice travel photography
Meh.
VERY NSFW - I'd hate to be the one who got this frame for grandma!
Stunning photography, too good to be theirs... damned image pirates
Cute kid; mom needs to wear sunblock
Cute baby pics
Wow. it's amazing what I'll do when bored, while WoW servers are down for patching.
If I took some pictures from each person and shuffled them around to other people, would I be crossing the photostreams?
If I have been able to see further than others, it is because I bought a pair of binoculars.
Well, someone sure is getting a jump on the pre-CES media hype. A conspiracy theorist would suggest that this Corey Halverson dude over in Seattle was slipped some info by his buddies over in Redmond working on a competing product, and looking to exclude a VC-funded startup right when they start gaining traction. That would explain why his blog only has three posts, and why he brought this up right before CES.
Me, I take this as an object lesson for what happens when you dump your product on woot, and when you don't bother to make even the slightest effort at security.
This truly is a PR nightmare, but will make a good plot mechanic in next season's procedural dramas.
I think the best would be to take someone's photos that they have uploaded already... And photoshop them. Nothing OBVIOUS... subtle... make them a bit fatter... little more greasy and maybe slightly unsymmetrical. Over the course a few months you could crush a sufficiently vain person.