61–69 of 69 posts
I see this as progress. I would imagine that an exercise like this done a decade ago would be much worse.
This was a really interesting idea and inspired me to do something similar. I had some Shodan credits from a Humble Bundle, so searched for all servers on port 80 in my city. Then I wrote a very simple Python program to screenshot each of those (using wkhtmltoimage), with 20 concurrent threads. I didn't stitch the images together and didn't try to login to any of the sites (that would be crossing a line, and simply m…
I called the Swedish government agency responsible for the same thing in Sweden and was quickly escalated and ended up with someone who knew what they were talking about. Hours later the page was down.
I suspect this was the correct path since having a foreign national calling about "hacking" a mw power plant might have ended with me in trouble.
There are too many to responsibly disclose to the parties affected. Some buildings are so connected one could cause quite a havoc.
Earlier quoted context omitted.
Unsecured cameras, internet facing lights, etc. It's not like leaving the home door open, which harms only me. Those devices can be used to harm others. IMHO fines for customers will lead to more secure devices, by design.
Ooooo and we can fine them for leaving doors unlocked, and for not being inside after curfew!
Earlier quoted context omitted.
What's the best way to self scan? I recently bought a wifi camera and digging through the settings I couldn't find a way to block external access. Ultimately I had to block is access via my router, however consumer models are terrible about blocking access to the internet.
Most consumer routers will by default block a connection _from_ the Internet. They use a private address range and apply NAT to outgoing connections, so explicit configuration is needed to do something with an incoming connection.
This was a really interesting idea and inspired me to do something similar. I had some Shodan credits from a Humble Bundle, so searched for all servers on port 80 in my city. Then I wrote a very simple Python program to screenshot each of those (using wkhtmltoimage), with 20 concurrent threads. I didn't stitch the images together and didn't try to login to any of the sites (that would be crossing a line, and simply m…
I once found a control panel for a power plant in the megawatt range in a neighbour country. I don't know exactly how powerful since no sane person would start clicking around, but there was easy access to maintenance things. I called the Swedish government agency responsible for the same thing in Sweden and was quickly escalated and ended up with someone who knew what they were talking about. Hours later the page wa…
It does raise the issue of responsible disclosure. I've approached companies in the past after identifying security flaws and had the whole range of responses. Thanks for telling us, we'll take it from here. Let us reward you for telling us. Let us sue you for hacking us... Now it's safer, if less socially responsible, to stay quiet. ️
For an overview of Internet exposure by country I created a bunch of dashboards, including Austria: https://exposure.shodan.io/#/AT
Earlier quoted context omitted.
Say it with me NAT Is Not A Firewall
I believe you, but I have little expertise. Could you explain or give examples why?
So the general idea that things will be safe from being behind nat is more or less wrong, unless you have 100% control over all possible traffic generated from the inner host(s), at which point you could have had it without firewall more or less. Will your robo-hover never phone home, never look for tuesday patches, java updates, OTA firmwares or talk to some license server or whatever? Then nat is ok, but if any of this can happen in some situation, then it is "on the internet" even if it started out behind nat.
It moves a machine along the scale from unreachable closer to unprotected-and-exposed-to-everything even if it's not all the way there.