11–20 of 37 posts
Does the camera firmware open a UPNP tunnel in AP to its telnet port?
Does this guy's Wifi router enable anyone one to open tunnels in his AP router?
From the tweet pics, it looks like the outside IP was able to connect to the camera via telnet. Does the camera firmware open a UPNP tunnel in AP to its telnet port? Does this guy's Wifi router enable anyone one to open tunnels in his AP router?
How would the malware even know that the camera was connected in? Especially if you're on a home network (which is firewalled / has NAT on). I suspect that it must be the central server that this camera reports to that is infected, either directly, or indirectly with some program sitting at a nearby router listening for traffic.
Usually much less than 5 minutes. There's just that much Internet scanning.
If NAT is configured properly, then there is no risk.
How would the malware even know that the camera was connected in? Especially if you're on a home network (which is firewalled / has NAT on). I suspect that it must be the central server that this camera reports to that is infected, either directly, or indirectly with some program sitting at a nearby router listening for traffic.
Because the camera requests port forwarding from your firewall using UPnP. Now your mobile app connects directly to port 83785 and streams video from the camera without any firewall hassles. The problem now is that hackers can also connect to port 83785 and exploit unpatched security holes. If a firmware update exists, its probably too technically challenging for Joe User to find and install. For a lot of these devic…
I expect the IoT to go though a similar phase, but eventually get fixed and be secure enough.
News flash: If you expose a device web-accessible port to an internet IP with no firewall and leave the default user name and password intact, it will get hacked. Put your shit behind firewalls and change the default user name and password to something secure. This is common sense stuff, people. Port scanners have existed for ages.
What is a good security camera? Who makes good ones? I haven't been able to find a company who provides a quality POE device that allows me to control the feed into something like Zoneminder. Do I have to use something more analog to be "safer" from something like this?