Slashdot Mirror
Push To Hack: Reverse Engineering an IP Camera (contextis.com)
New submitter tetraverse writes: For our most recent IoT adventure, we've examined an outdoor cloud security camera [the Motorola Focus 73] which like many devices of its generation a) has an associated mobile app b) is quick to setup and c) presents new security threats to your network. From the article: This blog describes in detail how we were able to exploit the camera without access to the local network, steal secrets including the home networkâ(TM)s Wi-Fi password, obtain full control of the PTZ (Pan-Tilt-Zoom) controls and redirect the video feed and movement alerts to our own server; effectively watching the watchers.
And that's all that need be said.
Where would one look?
Well, in case anyone was interested - http://www.contextis.com/resou...
..cloud exclusive hardware? It is not only about security but also as control of the hardware you paid for. http://martin.iturbide.com/201...
On the right hand side of the title text, behind the thing that looks like a shield and the thing that looks like a dashpot connected to a screen door, is a link. It's there.
http://www.contextis.com/resou...
(On my terminal the link is actually behind those two icons. I'm sure the icons are useful for something, but I'm not exactly sure what. The icons also partially obscure the "from the whatchamacallit dept" text, and I'm not exactly sure what that's good for, either.)
Slashdot is a classy site!
M&M security is not great (hard candy shell soft middle) but it's at least something. I've got plenty of CCTV IoT etc etc but they can not access the internet with a singular exception and thats pretty much an application specific firewall. The rest is all easily accessible via a VPN.
We keep getting gear that wants to up upnp to open up ports to the world. Only is useful while talking to cloud control gear. Meaning it's not very useful at all.
No sir I dont like it.
The problem of being a programmer with a mild case of OCD is that wrong logic statements become really unnerving.
"Watching what the watchers are watching" you stupid fucks.
"Yesterday I couldn't spell Engineer, today I are one!"
The E in STEM stands for "Engineering" not "English" you know..
"File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
Possibly while sitting on the toilet.
Website Just Down For Me? Find out
Mr asshole, please keep your spell checking fascism comments to yourself. As someone who has struggled all my 50+ years of my life with spelling and writing, I know how shaming your "helpful" comments are. Rather than helping they are more likely to shut the writer down. Silencing their voice. To include profanity in your "helpful" comment you double down on silencing their voice. So next time keep your unhelpful comments to yourself. If you really can't control your impulses, then please leave the profanity out. Your "Not fucking hard, is it?" turned a questionable "helpful" comment into a shaming insult.
RLH
Yes, Grammar Nazis demonstrate they have a very deep inferiority complex combined with a great deal of unresolved internalized anger that they redirect to the only group of people they can feel superior to, by only in an environment where they can strike from a great distance because they would be too cowardly to ever do so in person.
Gee whiz, the account name is 'edittard'. Why are you silencing someone who is clearly helplessly at the effect of THE RULES ?
Try username: admin, password: 12345
Works on just about every Panasonic "security" camera ever made.
How hard is it to have an story submission process that checks the integrity of inputs? Missing or hard to find story links seems to be a regular problem of late.
Personally, I don't see the camera as threatening. Sure, it may host vulnerabilities, but I have yet to see a camera actively try to attack my network. It has the potential to be an attack vector due to its vulnerabilities, but a threat? This tells me that tetra verse and timothy need to learn a bit more about their terminology.
The primary purpose of this website, like so many others, is communication. Someone who is employed to create the lines and story summaries needs to be skilled in communication. Part of those skills include a knowledge of English spelling and grammar, as well as good communication principles. If someone doesn't have those skills, they are not suitable for this position. This is not an assessment of them as a person, but an assessment of their skill set and its match for the job.
edittard is implying that timothy's work is regularly not up to scratch and should perhaps seek a different line of employment.
I worked on a camera that had ssh running with remote root access under a hidden default password... I shudder to think how many routers are out there doing the same sort of thing
Correct me here.. Did the fw portion of the hack happen on the lan or wan? It seems to imply wan, but some statements seem like they used their physical access to the camera.
Spelling and grammar Nazis exist because actual technical contribution to a discussion is too hard for them.
All the English lit majors out there have to do something to make up for their lack of technical intellect I guess.
Do you get paid to write words? No? Then you get a free pass.
The "editors" on Slashdot on the other hand don't.