Despite Reports of Hacking, Baby Monitors Remain Woefully Insecure

itwbennett writes: Researchers from security firm Rapid7 have found serious vulnerabilities in nine video baby monitors from various manufacturers. Among them: Hidden and hard-coded credentials providing local and remote access over services like SSH or Telnet; unencrypted video streams sent to the user's mobile phone; unencrypted Web and mobile application functions and unprotected API keys and credentials; and other vulnerabilities that could allow attackers to abuse the devices, according to a white paper released Tuesday. Rapid7 reported the issues it found to the affected manufacturers and to US-CERT back in July, but many vulnerabilities remain unpatched.

Comments

Re:Because the parents don't care.

[h33t l4x0r]

People would care if they were aware of the security and privacy risks.

If those babies have nothing to hide then they have nothing to worry about.