Slashdot Mirror
Push To Hack: Reverse Engineering an IP Camera (contextis.com)
New submitter tetraverse writes: For our most recent IoT adventure, we've examined an outdoor cloud security camera [the Motorola Focus 73] which like many devices of its generation a) has an associated mobile app b) is quick to setup and c) presents new security threats to your network. From the article: This blog describes in detail how we were able to exploit the camera without access to the local network, steal secrets including the home networkâ(TM)s Wi-Fi password, obtain full control of the PTZ (Pan-Tilt-Zoom) controls and redirect the video feed and movement alerts to our own server; effectively watching the watchers.
And that's all that need be said.
Where would one look?
He is a faggot. Trump has had multiple wimmen in his life. He should be next american alpha male.
And he wrote this where, precisely?
Well, in case anyone was interested - http://www.contextis.com/resou...
..cloud exclusive hardware? It is not only about security but also as control of the hardware you paid for. http://martin.iturbide.com/201...
On the right hand side of the title text, behind the thing that looks like a shield and the thing that looks like a dashpot connected to a screen door, is a link. It's there.
http://www.contextis.com/resou...
(On my terminal the link is actually behind those two icons. I'm sure the icons are useful for something, but I'm not exactly sure what. The icons also partially obscure the "from the whatchamacallit dept" text, and I'm not exactly sure what that's good for, either.)
Slashdot is a classy site!
M&M security is not great (hard candy shell soft middle) but it's at least something. I've got plenty of CCTV IoT etc etc but they can not access the internet with a singular exception and thats pretty much an application specific firewall. The rest is all easily accessible via a VPN.
We keep getting gear that wants to up upnp to open up ports to the world. Only is useful while talking to cloud control gear. Meaning it's not very useful at all.
No sir I dont like it.
The problem of being a programmer with a mild case of OCD is that wrong logic statements become really unnerving.
"Watching what the watchers are watching" you stupid fucks.
Verb, meaning to install or configure = "set up". Two words.
Noun, referring to the output or result of the above = "setup". One word.
Not fucking hard, is it?
At the bottom of the
Try username: admin, password: 12345
Works on just about every Panasonic "security" camera ever made.
How hard is it to have an story submission process that checks the integrity of inputs? Missing or hard to find story links seems to be a regular problem of late.
Personally, I don't see the camera as threatening. Sure, it may host vulnerabilities, but I have yet to see a camera actively try to attack my network. It has the potential to be an attack vector due to its vulnerabilities, but a threat? This tells me that tetra verse and timothy need to learn a bit more about their terminology.
I worked on a camera that had ssh running with remote root access under a hidden default password... I shudder to think how many routers are out there doing the same sort of thing
Correct me here.. Did the fw portion of the hack happen on the lan or wan? It seems to imply wan, but some statements seem like they used their physical access to the camera.