Earlier quoted context omitted.
Maybe. Windows had a single company behind it, and as I recall Bill had to issue a company-wide cease and desist order to get people to stop developing and focus on security for a while. IoT may always be plagued by cheap hardware with buggy software from fly-by-night companies.
Whoa, any reading you can point to on that historical note?
This security camera was infected by malware 98 seconds after it was plugged in
31–37 of 37 posts
Re: This security camera was infected by malware 98 seconds after it was plugged in
#32Earlier quoted context omitted.
Because the camera requests port forwarding from your firewall using UPnP. Now your mobile app connects directly to port 83785 and streams video from the camera without any firewall hassles. The problem now is that hackers can also connect to port 83785 and exploit unpatched security holes. If a firmware update exists, its probably too technically challenging for Joe User to find and install. For a lot of these devic…
I don't believe you could download and install a firmware update in those 2 minutes. If you knew about the risk, you would have secured your router firewall. If you did not know, you wouldn't be rushing to install the firmware. Once the camera is compromised, it can modify the firmware being transmitted (to compromise it) or prevent its install.
If you knew about the risk, you would have secured your router firewall
I suppose there's a follow-up story to be had on routers that come with UPNP enabled by default, because wherever that's the case, your firewall has a hole poked in it as soon as the device powers up and connects to the LAN.
Re: This security camera was infected by malware 98 seconds after it was plugged in
#33What is a good security camera? Who makes good ones? I haven't been able to find a company who provides a quality POE device that allows me to control the feed into something like Zoneminder. Do I have to use something more analog to be "safer" from something like this?
We use Ubiquiti Unifi. We use their software with it, but I'm sure you could feed it into Zoneminder. Very happy with it.
Do they host their software or is it installed on a local device?
Re: This security camera was infected by malware 98 seconds after it was plugged in
#34a tech industry veteran - Internet-scanning(his hobby) - cheap camera - no firewall - wannabe famous -> make your pick. 100% he infected it himself.
Re: This security camera was infected by malware 98 seconds after it was plugged in
#35What is the expected time between port scan for an arbitrary IPv4 address? Is the level of scanning activity so high (or so well-targeted to "promising" address spaces) that one should expect to be scanned in minutes?
I have between 2500 and 40,000 SSH login attempts on a server on my home broadband in Denmark, usually around 30,000. That's one every 90 seconds or so.
Wow.
I don't know about other ports, other than HTTP I don't have any open.
A server on slow home broadband in the UK is only receiving 100-300 attempts per day. It's almost identical to the one in Denmark, except the broadband is terrible.
Several servers in a university's IP space has about 5000-10000 attempts per day.