Live data from Hacker News

New security camera compromised by worm within minutes of installation

twitter.com

31–40 of 94 posts

Re: New security camera compromised by worm within minutes of installation

#31

Earlier quoted context omitted.

They do it so they can view the camera remotely, like when they're on vacation.

This, and with the camera it looks like it automatically opened up firewall ports by itself using UPNP

People need to VPN home to see their fucking cameras lol.

Re: New security camera compromised by worm within minutes of installation

#32
post #31

Earlier quoted context omitted.

This, and with the camera it looks like it automatically opened up firewall ports by itself using UPNP

People need to VPN home to see their fucking cameras lol.

People don't care. They don't think anybody else is going to be interested in watching their cameras, and it doesn't even cross their mind that a camera could be vulnerable to an exploit. They don't even know what an exploit is. Once they can see their camera from their phone, they don't care what else is happening.

Re: New security camera compromised by worm within minutes of installation

#33

Why do people connect their security camera to the internet? You shouldn't connect security anything to the internet

They do it so they can view the camera remotely, like when they're on vacation.

Also to have an external backup of the video feed.

Otherwise, if you get robbed, and they happen to steal your NAS, you've lost the main reason to have a security camera in the first place - to identify the perp.

Re: New security camera compromised by worm within minutes of installation

#34

Why do people connect their security camera to the internet? You shouldn't connect security anything to the internet

They do it so they can view the camera remotely, like when they're on vacation.

I purchased a TP-LINK camera and didn't want to use their cloud, so I made it ftp images to a Raspberry Pi and then forward them to me via a Telegram Bot. I've been pondering getting OpenWRT on the camera and then running the bot directly on it; I'm not sure it's feasible.

Re: New security camera compromised by worm within minutes of installation

#36

Why do people connect their security camera to the internet? You shouldn't connect security anything to the internet

They do it so they can view the camera remotely, like when they're on vacation.

Take a look at Axis Secure Remote Access solution for a way to avoid port forwarding (with its issues) and still get remote access, basically no configuration at all except from actually initially adding the camera to your site.

Only works on Axis cameras though with Axis client software I should mention.

Re: New security camera compromised by worm within minutes of installation

#37
post #36

Earlier quoted context omitted.

They do it so they can view the camera remotely, like when they're on vacation.

Take a look at Axis Secure Remote Access solution for a way to avoid port forwarding (with its issues) and still get remote access, basically no configuration at all except from actually initially adding the camera to your site. Only works on Axis cameras though with Axis client software I should mention.

Take a look at Blue Iris (unfortunately Windows only). It supports almost every camera imaginable, and has the benefit that it runs on a single Windows server you can secure, while it pulls camera feeds directly from the cameras over your private network. You can still download a mobile app and connect securely to the video server to browse recordings or watch live feeds.

I much prefer this model, because then I don't have to trust all these terrible cameras; simply isolate them on a private wifi network that only your Blue Iris server can reach.

Re: New security camera compromised by worm within minutes of installation

#38
post #29

Earlier quoted context omitted.

There is a lot of scanning going on by a lot of people

Back when I had an ISDN connection, I'd see 5-10 attempts a day (and I would sometimes send emails to the abuse@ address for that IP range). Now I see 5-10 a second and it's pointless to try and stop them at the source. I'm somewhat curious if all those attempts count against my data cap.

> I'm somewhat curious if all those attempts count against my data cap.

I don't see why they wouldn't. IP (which is really the layer ISPs should operate at) does not distinguish between packets that you have "requested" and unsolicited packets, being connectionless protocol and all.

Re: New security camera compromised by worm within minutes of installation

#39
post #6

This is why the appliance market - Dropcam in this case - is often safe from the DIY enthusiast market. Setting these up is one hurdle. After that's done there's any combination of: network maintenance, security patches, updates, hosting a local server, DNS, troubleshooting etc. For some people, it's just worth $150 + 10/mo to not have something else to think about.

Setting one of these up is considered "DIY"? Wouldn't actually making the backend for it, at the very least, be DIY?
Post reply on HN