Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Shodan: The scariest search engine on the Internet

money.cnn.com

Post reply on HN
Print view View original

11–20 of 152 posts

Re: Shodan: The scariest search engine on the Internet

#11

Post by ari_elle »

mhm sorry as i don't know so much about this, but how is this different from google?

meaning that with a specific search in google i can find for example all kinds of cameras or systems one shouldn't find, e.g.:

-) http://preview.tinyurl.com/34959u

Maybe Shodan "focuses" on that, but they can't possible index more of those things than Google already has...

Can you find one single thing over Shodan you can't with a specific Google search? (maybe you find such things more easily with Shodan...)

EDIT: More information on Shodan:

-) Defcon Presentation [pdf]

https://www.defcon.org/images/defcon-18/dc-18-presentations/...

-) Secanalysis.com

http://secanalysis.com/a-brief-analysis-of-shodan/

JoshuaRedmond beneath also provided interesting links

Re: Shodan: The scariest search engine on the Internet

#12

Post by alecdibble »

Apocryphon wrote: post #9

"Shodan searchers have found control systems for a water park, a gas station, a hotel wine cooler and a crematorium. Cybersecurity researchers have even located command and control systems for nuclear power plants and a particle-accelerating cyclotron by using Shodan." How can there be any conceivable reason to connect these systems to the internet? Do they WANT an attack right out of a technothriller novel or the la…

Many embedded systems run Linux and are frequently attached to the netword for remote control. The root passwords aren't usually changed on these Linux boxes, so they are a wide open security hole.

Many companies pay attention to this sort of thing and make an effort to isolate these kind of devices to the local intranet. For every company that is it good about it, there are probably 10 that aren't even aware of the issue.

Re: Shodan: The scariest search engine on the Internet

#13

Post by [deleted] »

Apocryphon wrote: post #9

"Shodan searchers have found control systems for a water park, a gas station, a hotel wine cooler and a crematorium. Cybersecurity researchers have even located command and control systems for nuclear power plants and a particle-accelerating cyclotron by using Shodan." How can there be any conceivable reason to connect these systems to the internet? Do they WANT an attack right out of a technothriller novel or the la…

[deleted]

Re: Shodan: The scariest search engine on the Internet

#15

Post by chm »

Hardware manufacturers should ship their devices with a piece of paper printed with a unique UID and password. Not "admin/1234".

The owner would have the ability to change these at will, and resets would revert to the original UID/pw combination.

Lost your piece of paper? Send the device back. No more trivial hacks.

Re: Shodan: The scariest search engine on the Internet

#16

Post by IheartApplesDix »

ari_elle wrote: post #11

mhm sorry as i don't know so much about this, but how is this different from google? meaning that with a specific search in google i can find for example all kinds of cameras or systems one shouldn't find, e.g.: -) http://preview.tinyurl.com/34959u Maybe Shodan "focuses" on that, but they can't possible index more of those things than Google already has... Can you find one single thing over Shodan you can't with a sp…

Crazy idea, if you don't know what you're talking about, shut the hell up.

Re: Shodan: The scariest search engine on the Internet

#17

Post by joshgel »

IheartApplesDix wrote: post #16
ari_elle wrote: post #11

mhm sorry as i don't know so much about this, but how is this different from google? meaning that with a specific search in google i can find for example all kinds of cameras or systems one shouldn't find, e.g.: -) http://preview.tinyurl.com/34959u Maybe Shodan "focuses" on that, but they can't possible index more of those things than Google already has... Can you find one single thing over Shodan you can't with a sp…

Crazy idea, if you don't know what you're talking about, shut the hell up.

Or ask an informed group of readers for clarification?

Re: Shodan: The scariest search engine on the Internet

#18

Post by ari_elle »

IheartApplesDix wrote: post #16
ari_elle wrote: post #11

mhm sorry as i don't know so much about this, but how is this different from google? meaning that with a specific search in google i can find for example all kinds of cameras or systems one shouldn't find, e.g.: -) http://preview.tinyurl.com/34959u Maybe Shodan "focuses" on that, but they can't possible index more of those things than Google already has... Can you find one single thing over Shodan you can't with a sp…

Crazy idea, if you don't know what you're talking about, shut the hell up.

it was an honest question and i don't think your reaction is appropriate behaviour for this site.

If most think my comment is worthless, the voting system will make it enter the void. If others think it isn't it will be upvoted. That's how this site works.

Just responding with "Shut up" adds nothing to the discussion and is something i am shocked to see on this site :(

Re: Shodan: The scariest search engine on the Internet

#19

Post by easytiger »

IheartApplesDix wrote: post #16
ari_elle wrote: post #11

mhm sorry as i don't know so much about this, but how is this different from google? meaning that with a specific search in google i can find for example all kinds of cameras or systems one shouldn't find, e.g.: -) http://preview.tinyurl.com/34959u Maybe Shodan "focuses" on that, but they can't possible index more of those things than Google already has... Can you find one single thing over Shodan you can't with a sp…

Crazy idea, if you don't know what you're talking about, shut the hell up.

actually people have been posting google searches to find exposed home ip camera systems and the like for years.

Re: Shodan: The scariest search engine on the Internet

#20

Post by marknutter »

IheartApplesDix wrote: post #16
ari_elle wrote: post #11

mhm sorry as i don't know so much about this, but how is this different from google? meaning that with a specific search in google i can find for example all kinds of cameras or systems one shouldn't find, e.g.: -) http://preview.tinyurl.com/34959u Maybe Shodan "focuses" on that, but they can't possible index more of those things than Google already has... Can you find one single thing over Shodan you can't with a sp…

Crazy idea, if you don't know what you're talking about, shut the hell up.

Dude, what the heck?
Post reply on HN