Live data from Hacker News

A podcast that hacks Ring camera owners live

vice.com

41–50 of 283 posts

Re: A podcast that hacks Ring camera owners live

#41
post #16

I think "hacks" is a pretty strong word here. They're basically just brute forcing accounts with email and password combos that have been leaked from other sources.

I don’t know about that. “Hack” is an overloaded term, but one of its meanings is to gain unauthorized access. Seems apt.

Re: A podcast that hacks Ring camera owners live

#42
post #2

It's obviously bad to hack into a citizen's systems without consent, but there's some kind of value that might be created here. Ring cameras are basically being used as a gigantic police-partnered dragnet: Amazon’s Ring Planned Neighborhood “Watch Lists” Built on Facial Recognition https://theintercept.com/2019/11/26/amazon-ring-home-securit... If this provides a disincentivize to an average user buying Ring cameras,…

This is a very hyperbolic take. Police do not have access to the cameras, only the server stored footage, which is both optional to share and optional to even participate in.

This is a red-herring.

Nobody cares about physical access to essentially disposable cameras. The stored footage is the whole game.

Re: A podcast that hacks Ring camera owners live

#43
post #42

Earlier quoted context omitted.

This is a very hyperbolic take. Police do not have access to the cameras, only the server stored footage, which is both optional to share and optional to even participate in.

This is a red-herring. Nobody cares about physical access to essentially disposable cameras. The stored footage is the whole game.

Yes, and stored footage is completely optional with Ring cameras.

Re: A podcast that hacks Ring camera owners live

#44
post #16

I think "hacks" is a pretty strong word here. They're basically just brute forcing accounts with email and password combos that have been leaked from other sources.

Why is Ring allowing brute forcing? Individual cameras should be set to only allow logins at least a few seconds apart increasing up to several minutes and perhaps blocking IP addresses with excessive volume. If they're brute forcing Ring's servers an application firewall would catch and block this.

Re: A podcast that hacks Ring camera owners live

#45
post #16

I think "hacks" is a pretty strong word here. They're basically just brute forcing accounts with email and password combos that have been leaked from other sources.

Why is Ring allowing brute forcing? Individual cameras should be set to only allow logins at least a few seconds apart increasing up to several minutes and perhaps blocking IP addresses with excessive volume. If they're brute forcing Ring's servers an application firewall would catch and block this.

I don't think that the above comment means brute-forcing in the "try a million different passwords in a short time-period" sense, it's referring to finding a list of known password and email combinations and trying just those. I would expect that a few attempts wouldn't trip any brute-force alarms.

Re: A podcast that hacks Ring camera owners live

#46

Earlier quoted context omitted.

>Ring cameras are basically being used as a gigantic police-partnered dragnet: Isn't that sort of like saying humans are basically used as a gigantic police-partnered dragnet...seeing as our entire criminal system is primarily driven by eye witnesses of crimes? Only what we know is eye-witnesses often have conflicting testimony, some will refuse to assist police officers (out of concern for their own safety or they j…

A police camera watching a gas station is not the same as a police camera watching your front door.

This is a tech community, and I like tech metaphors - it’s like old CCTVs were inside the firewall and these new services our outside the firewall. In the old model, sharing your data (videos) was opt in each time. You could be sure that only you had access to the data unless you chose to share it. In the new model, you are always sharing, and these hacks show you don’t really even know who you are sharing with.

Re: A podcast that hacks Ring camera owners live

#47
post #20

Earlier quoted context omitted.

No, but my camera watching what happens outside of my house is also not the same as a police camera. I didn't have such a camera at my old house, but if I did, there were several happenings that would have been reported to police.

there were several happenings that would have been reported to police. Reported. Not prevented. The companies that make money off of law enforcement have conditioned people to believe cameras=prevention and camera=safety, which is false.

True, but camera=deterrent?

Re: A podcast that hacks Ring camera owners live

#48
post #20

Earlier quoted context omitted.

A police camera watching a gas station is not the same as a police camera watching your front door.

No, but my camera watching what happens outside of my house is also not the same as a police camera. I didn't have such a camera at my old house, but if I did, there were several happenings that would have been reported to police.

Ring lets law enforcement know that potential video evidence exists, and with that knowledge, they can go to a judge and get a warrant for it. Law enforcement can do this without ever letting the user who recorded the video know.

For that reason, it's essentially a police camera. The police can ask nicely for the video footage, and if you don't cooperate, they can easily get a warrant to obtain the potential evidence from Ring.

Re: A podcast that hacks Ring camera owners live

#49
Just heard about this on the radio eating breakfast. The DJ said "so I guess you should be changing your passwords often if you want to protect your self. And also turn on uh... what was that thing starts with a 2? 2-something? Uhhh... yeah 2-fac-tor authentication... yeah. Do that."

The radio crew doesnt talk about computers very often so I thought the way they spoke was interesting.

Re: A podcast that hacks Ring camera owners live

#50
post #2

It's obviously bad to hack into a citizen's systems without consent, but there's some kind of value that might be created here. Ring cameras are basically being used as a gigantic police-partnered dragnet: Amazon’s Ring Planned Neighborhood “Watch Lists” Built on Facial Recognition https://theintercept.com/2019/11/26/amazon-ring-home-securit... If this provides a disincentivize to an average user buying Ring cameras,…

This is a very hyperbolic take. Police do not have access to the cameras, only the server stored footage, which is both optional to share and optional to even participate in.

> Police do not have access to the cameras, only the server stored footage, which is both optional to share

Ring lets police know that potential video evidence exists, and with that knowledge, they can then get a warrant to obtain the potential evidence from Ring if you choose not to share it.

Post reply on HN