Slashdot Mirror
Nearly 200,000 Wi-Fi Cameras Are Open To Hacking (bleepingcomputer.com)
An anonymous reader quotes a report from BleepingComputer: What started as an analysis of a simple security flaw in a random wireless IP camera turned into seven vulnerabilities that affect over 1,250 camera models and expose nearly 200,000 cameras to hacking. The flaws affect a generically named product called Wireless IP Camera (P2P) WIFICAM, manufactured by a (currently unnamed) Chinese company, who sells it as a white-label product to several other camera vendors. Security researcher Pierre Kim says the firmware produced by this Chinese vendor comes with several flaws, which have all made their way down the line into the products of other companies that bought the white-label (unbranded) camera. In total, nearly 1,250 camera models based on the original camera are affected. At the heart of many of these issues is the GoAhead web server, which allows camera owners to manage their device via a web-based dashboard. According to Kim, the cameras are affected by a total of seven security flaws. Yesterday, Kim said that around 185,000 vulnerable cameras could be easily identified via Shodan. Today, the same query yields 198,500 vulnerable cameras. Proof-of-concept exploit code for each of the seven flaws is available on Kim's blog, along with a list of all the 1,250+ vulnerable camera models.
Must be a slow news day
The flaws affect a generically named product called Wireless IP Camera (P2P)
"Flaws".
It's just that these cameras, like the ovwewhelming majority of the Internet of Things, is 100 percent insecure. Real hackers probably are insulted by the insinuation that you actually have to hack anything.
And y'all better get used to it folks. THe manufacturers are pushing this, and the consumers are buying this, and it's not going away.
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
Only one Hikvision, and none of mine are that particular model. Not to mention all cloud based functionality is turned off, and it's blocked at the router. VPN accessible only.
I doubt it's really hacking but rather people not understanding how/why they need to change the default admin username and password. Many of the recent major hacks have been due to default admin password not being changed.
Download some AV like Avast.
Run the Home network security
https://www.avast.com/f-home-n...
If you need your CCTV network sending out images use cell networks to send the alert images.
Domestic spying is now "Benign Information Gathering"
So when will we be able to have consumer grade routers that keep selected crwp devices on a separate network and generally restricted access? Is this possible with Tomato or an OSS firmware, either manually or automagically? To me I see this as the next step to informing and training consumers on networking, the first being adding passwords to their wireless networks.
Like, some sort of voluptuous Brazilian tranny like Jessica Versace or Andrezza Lyra or Yasmin Pires?
backdoors for everything and everyone. the better to see you with, my dear.
Russians sold cheap USB sticks next to US military base in Kabul in hope that they will use them within internal network - they succeed (http://www.businessinsider.com/russia-planted-bugged-thumb-drives-to-break-into-us-govt-computers-2017-3). What if these wi-fi cameras are on purpose subsidized by government and indeed have back doors?
The first link, as it is the norm with the so-called Slashdot nowadays, is clickbait blogspam. The real story is linked last.
Read it. It's super lulz-worthy. Basically this is as bad as you can get.
This is not just default-password mindless hack. The funny thing is this
But it appears access to .ini [system config blob] files are not correctly checked. The attacker can bypass the authentication by providing an empty loginuse and an empty loginpas in the URI... This vulnerability allows an attacker to steal credentials, ftp accounts and smtp accounts (email).
So no matter whatever password there is, you can simply read it off the server without auth. After reading the credentials in plaintext, you can exploit another hole in the FTP config (why the fuck they put FTP there) program and execute arbitrary code as root.
Those people are doofus.
I ran openVAS on my camera last night. It found only one low priority vulnerability with TCP time stamps.
They are on a separate network and none can be accessed from outside that network. They ftp alarms to an ftp server which then does whatever is needed with those files. I would prefer a camera that only needs a username and password to get to the config panels. Nobody can get to my cameras unless they have physical access to the network. Security for IoT does not have to/nor can it be done at the device level.
Behavior is defined by feedback loops and currently there is no feedback from selling insecure crap to idiots. The obvious solution is to create a feedback loop by having each insecure device pound away at the websites of the people that made them.
Anons need not reply. Questions end with a question mark.
(in short IDIOT)
Describes the user better than the product.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
These are probably all compromised already. Why is this being posted?
I tend to rant.
Is that all? I would consider that good news. That means that several millions are already secure.
Don't fight for your country, if your country does not fight for you.
the real problem is the millions of Wi-Fi cameras, routers, etc. in which the users have turned the security features off.
Many people have about 2 minutes the patience to get their gadgets to work with the security features on. Then they will happily use hours finding out how to turn the security features off.