Slashdot Mirror
Police Bodycams Can Be Hacked To Doctor Footage, Install Malware (boingboing.net)
AmiMoJo shares a report from Boing Boing: Josh Mitchell's Defcon presentation analyzes the security of five popular brands of police bodycams (Vievu, Patrol Eyes, Fire Cam, Digital Ally, and CeeSc) and reveals that they are universally terrible. All the devices use predictable network addresses that can be used to remotely sense and identify the cameras when they switch on. None of the devices use code-signing. Some of the devices can form ad-hoc Wi-Fi networks to bridge in other devices, but they don't authenticate these sign-ons, so you can just connect with a laptop and start raiding the network for accessible filesystems and gank or alter videos, or just drop malware on them.
Just create a law that prohibits anyone from hacking these cameras -- problem solved! // sarcasm.
I hacked the sheriff, but I did not wipe his bodycam... ooo oooo
Need to know if there are any cops around for your illegal business? Don't worry, you can just setup a wifi scanner on your phone to alert you when a cop's camera comes within range! Effective at least a couple hundred meters and probably up to a km!
Government purchase contracts and decision-making has a poor reputation for a reason. This is just yet another example in a very long list.
The party of stupid and the party of evil get together and do something both stupid and evil, then call it bipartisan.
Well who woulda thunk cameras could be hacked? Certainly not the people who know their voting machines could NEVER be hacked and if they were, then it was illegal and shouldn't have happened, so there.
Hacking the camera itself is only one flaw
Any video that has been used in a court case must be preserved until all possible appeals have been exhausted. I'll bet it'd be a lot easier to doctor the photos after they've been viewed and claim the whole case is flawed.
deactivate their cameras after drawing their firearms.
Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
However, generally the police have proven largely indifferent to technology so there are not that many coders among them apparently, and experts in video time sync and editing usually requires an apprenticeship and access to expensive software that a cop on the beat is unlikely to conjure up.
---- The above post was generated by the Turing Institute. Maybe.
I find it interesting that important, critical even, systems such as police bodycams and election voting machines in this age appear to have almost an intentional absence of any sort of integrity mechanisms. And can quite literally be manipulated in minutes with next to no effort. These flaws are not complex. They are things that should be picked up by even the technically absent as just looking at the system overviews - no encryption, no signing, ineffective and easily bypassible authentication (if any) as obvious caveats to a resilient system. I just don't buy this as simple and frighting negligence. And where are the pen tests? I call shenanigans!
Those who can, do. Those who cannot, sue.
Why in the name of FSM are these things WiFi enabled? Why is that circuitry in there?
On, record, download later.
Yeah. Now you really can't trust what you're shown, or what your e-books tell you.
It's a conspiracy nut's dream come true, and to the sane ones, this will be a total fucking nightmare, these next few decades.
If the Industrial Revolutions were a nightmare for most, and the post-war world a nightmare again, those will seem like rosy times, I think. What's coming is bound to be absolutely frightening. Post-truth. Post-reason. Ugh.
The "Civilized World" jumped the shark ca. 1973.
Is there anything left we can trust as reliable? In the age of fabricated just about anything.. in an age where computers can convincing super-impose faces on people in a video.. in an age where audio can be altered in any way you can imagine.. what can we trust anymore?
Starting to worry they'll hack our eyeballs and eardrums next. Nothing would surprise me at this point.
Instantly reminds me of Laughing Man from GITS
"hackers" can insert or change files in filing cabinets throughout virtually every police station!
last I checked, this would fall under obstruction of justice, at the very least.
it's not surprising that criminals can perform crimes.
start arresting them.
...but seriously, what the ever-living fuck?
I mean, does anyone designing mission-critical shit ever think of this crap? It's not like wireless hacking was invented yesterday.
Maybe police body cams should be recording into an encrypted drive and simultaneously streaming to a drive sealed away in a black box in the cop car for error checking? And have NO ability to adjust the system in any way but with physical contact with some sort of unique dongle that registers infallibly when it's been used.
-Styopa
Lowest bidder wins gov't contract... Shitty product!
Noice
Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
We can call it the P.A.T.S.I. law or the (Police Anti-Tampering Security Intervention)
Careful on Single source supply. Interoperability might be more expensive in near term but will help bring costs down mid term.
So all those police videos of the police beating, kicking, shooting, and treating someone badly are all fake! Wow! ""Sarcasm"". If the hacking is that easy then why do we have so many police abuse videos, shouldn't we have none?
I toldja it's totally rigged, believe me! I did nothing, absoluuutely nothing! It's all fake footage. I did not attend that meeting; what you see on the video is a deeply state fake!
Officer is on duty. Something royally hits the fan and is captured on bodycam. Within a very short space of time, while still on the scene, the body cam is shut down and stored in an evidence bag. The providence of that evidence is documented and recorded.
From this point onwards the camera is powered off in a sealed tamper proof bag. It is then returned to the station and signed for. The bag is opened and the video is transferred to the storage system. Most likely the camera storage card is then also put into an evidence bag and sealed.
So where does the ability to hack these camera matter? You aren't editing the footage in any way during this window.
Just because a hack is possible doesn't mean there is a usage case for it.
Lets say you upload malware. Who cares. You manage to take out a camera or 2 before they get cleaned. meh.
So DON'T EVEN TRY...
Love, The Police State
This sounds interesting, hmmm?
they're not susceptible to Spectre/Meltdown! Based on the latest /. postings regarding S/M, if I'm not freaking out about it, all my passwords are stolen!!
Police Bodycams Can Be Hacked To Doctor Footage
It's a feature.
politicians are like babies' nappies: they should both be changed regularly and for the same reasons
How would a hacker be able to download the video, deep fake it, then reupload the file in the time your typical officer is at the crime scene?
Most likely scenerio is that the files simply get erased and the flash memory overwritten with garbage.
This Doctor Footage has been getting away with murder for decades. Why don't they just arrest him for Pete's sake?
This posting is provided 'AS IS' without warranty of any kind, implied or otherwise.