Samsung 'Smart' Camera Easily Hackable

An anonymous reader writes "The op-co.de blog has a post about the incredibly poor job Samsung did securing its new NX300 'smart camera.' One of the camera's primary features is that it can join Wi-Fi networks — this lets it upload photos, but it also lets you use your smartphone to access the photos on the camera directly. You can also connect with NFC. Unfortunately, the way they set it up is extremely insecure. First, there's an NFC tag that tells the camera where to download the app, and also the name of the access point set up by the camera. 'The tag is writable, so a malicious user can easily 'hack' your camera by rewriting its tag to download some evil app, or to open nasty links in your web browser, merely by touching it with an NFC-enabled smartphone.' Things aren't much better with Wi-Fi — a simple port scan reveals that the camera is running an unprotected X server (running Enlightenment). When the camera checks for new firmware, it helpfully reports your physical location. Its software also sets up unencrypted access points."

Comments

Samsung = Korean state spy gadgets

[RocketRabbit]

I thought everybody knew that most Samsung electronics are basically just spy gadgets. This includes their phones and TVs as well. After the baseband modem flaw / fiasco why would you assume any Samsung gadget with a processor and a radio is any better?

Keep using them, especially if you work with sensitive information - the Korean economy thanks you as does one of their largest military contractors, Samsung.

Oh and Google won't mind skimming a bit of your data off the top either.