Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Slovakia finds Russian backdoor in traffic speed cameras

risky.biz

Post reply on HN
Print view View original

21–30 of 180 posts

Re: Slovakia finds Russian backdoor in traffic speed cameras

#21

Post by lifestyleguru »

tomas789 wrote: post #17

Imagine somebody being able to track almost anyone using road side cameras. Good thing such things happen only in eastern Europe wink wink

For the goal of recording a cat scratching their car or catching an imaginary thief neighbour (a magpie or fox stole that thing that one time, you dullard) people will plug into Chinese, Russian, and American video surveillance networks in no time and pay for it.

Re: Slovakia finds Russian backdoor in traffic speed cameras

#22

Post by probably_wrong »

cyanydeez wrote: post #15
bdhdhduuyd wrote: post #12

Earlier quoted context omitted.

To set roofs on fire? In the end it's all about trust. Right now I don't see why China would like to burn down their market.

guys, do we need to reinvent the same Hanlon razor but for capitalism: Dont attribute to malice that which can easily be explained by capitalism?

If we're reinventing sayings, I suggest Clarke's third law first: Any sufficiently advanced capitalism is indistinguishable from malice.

Re: Slovakia finds Russian backdoor in traffic speed cameras

#23

Post by LogTrim »

The detail that gets me is the Ministry saying the cameras were safe because they'd be on a closed network, while the backdoor can apparently be triggered via SMS from hardcoded phone numbers.

That's a pretty good demonstration of why "it's not exposed to the internet" isn't a security boundary if the device itself has an out-of-band communications path.

Add Secure Boot being disabled and unauthenticated live streams and this seems less like one unfortunate backdoor and more like nobody established what the trust boundary was supposed to be in the first place.

Re: Slovakia finds Russian backdoor in traffic speed cameras

#24

Post by yieldcrv »

bdhdhduuyd wrote: post #6

So they bought the cameras and some people pointed out they look exactly the same as Russian cameras. The government denied this but after they figured out the serial numbers matched the Russian cameras they started this investigation. Good they investigated this before using them, but this sounds like a big fu...

[flagged]

Re: Slovakia finds Russian backdoor in traffic speed cameras

#30

Post by somenameforme »

tomas789 wrote: post #17

Imagine somebody being able to track almost anyone using road side cameras. Good thing such things happen only in eastern Europe wink wink

Most cameras are insecure by default. Check out: http://www.insecam.org/en/ or https://www.shodan.io/ The first isn't even using default access creds, which I suspect is what was 'discovered' in this case, but cameras that immediately hook up to the internet with 0 restrictions to access.
Post reply on HN