Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Shodan: The scariest search engine on the Internet

money.cnn.com

Post reply on HN
Print view View original

21–30 of 152 posts

Re: Shodan: The scariest search engine on the Internet

#21

Post by cobrausn »

ari_elle wrote: post #18
IheartApplesDix wrote: post #16

Earlier quoted context omitted.

Crazy idea, if you don't know what you're talking about, shut the hell up.

it was an honest question and i don't think your reaction is appropriate behaviour for this site. If most think my comment is worthless, the voting system will make it enter the void. If others think it isn't it will be upvoted. That's how this site works. Just responding with "Shut up" adds nothing to the discussion and is something i am shocked to see on this site :(

Look at the username - likely a purpose built troll account. Not the first I've seen on HN, but it's happening more than it used to.

Re: Shodan: The scariest search engine on the Internet

#22

Post by btilly »

IheartApplesDix wrote: post #16
ari_elle wrote: post #11

mhm sorry as i don't know so much about this, but how is this different from google? meaning that with a specific search in google i can find for example all kinds of cameras or systems one shouldn't find, e.g.: -) http://preview.tinyurl.com/34959u Maybe Shodan "focuses" on that, but they can't possible index more of those things than Google already has... Can you find one single thing over Shodan you can't with a sp…

Crazy idea, if you don't know what you're talking about, shut the hell up.

I used to be able to tell people like you to go back to Reddit. Unfortunately the quality of HN has declined far enough that your content-free insulting of a decent question is not immediately recognizable as something with no place here.

I consider that fact a sad commentary on how far HN has fallen.

Re: Shodan: The scariest search engine on the Internet

#23

Post by indiecore »

chm wrote: post #15

Hardware manufacturers should ship their devices with a piece of paper printed with a unique UID and password. Not "admin/1234". The owner would have the ability to change these at will, and resets would revert to the original UID/pw combination. Lost your piece of paper? Send the device back. No more trivial hacks.

>Lost your piece of paper? Send the device back. No more trivial hacks.

and pay for the millions of dollars worth of un-installation, shipping, and re-installation?

Re: Shodan: The scariest search engine on the Internet

#24

Post by JoshuaRedmond »

ari_elle wrote: post #11

mhm sorry as i don't know so much about this, but how is this different from google? meaning that with a specific search in google i can find for example all kinds of cameras or systems one shouldn't find, e.g.: -) http://preview.tinyurl.com/34959u Maybe Shodan "focuses" on that, but they can't possible index more of those things than Google already has... Can you find one single thing over Shodan you can't with a sp…

I'm not an expert in it by all means, but from what I've seen it is like having Google log all the http headers and servers connected to requested as well. This means that it is incredibly easy to, for example, track down certain servers with a certain exploit that you know about [1], or complete systems that shouldn't really be attached to the internet in their current state [2]. Not sure either of those are possible with Google.

[1] - http://erratasec.blogspot.co.uk/2009/12/shodan-scares-me.htm...

[2] - http://www.zdnet.com/blog/security/shodan-search-exposes-ins...

Re: Shodan: The scariest search engine on the Internet

#25

Post by afreak »

chm wrote: post #15

Hardware manufacturers should ship their devices with a piece of paper printed with a unique UID and password. Not "admin/1234". The owner would have the ability to change these at will, and resets would revert to the original UID/pw combination. Lost your piece of paper? Send the device back. No more trivial hacks.

That would make the devices more costly to produce and would raise prices. I know that ISPs do this with their devices sometimes, but some companies will cheap out and will just ship with a generic username and password since they only have to flash one single ROM image.

Re: Shodan: The scariest search engine on the Internet

#27

Post by tlrobinson »

ari_elle wrote: post #11

mhm sorry as i don't know so much about this, but how is this different from google? meaning that with a specific search in google i can find for example all kinds of cameras or systems one shouldn't find, e.g.: -) http://preview.tinyurl.com/34959u Maybe Shodan "focuses" on that, but they can't possible index more of those things than Google already has... Can you find one single thing over Shodan you can't with a sp…

I could be wrong, but I believe Shodan actually portscans the entire internet, whereas Google only crawls known URLs. They also index HTTP headers, which Google doesn't do.

It's run by our very own achillean: https://news.ycombinator.com/threads?id=achillean

Re: Shodan: The scariest search engine on the Internet

#28

Post by pseut »

ari_elle wrote: post #11

mhm sorry as i don't know so much about this, but how is this different from google? meaning that with a specific search in google i can find for example all kinds of cameras or systems one shouldn't find, e.g.: -) http://preview.tinyurl.com/34959u Maybe Shodan "focuses" on that, but they can't possible index more of those things than Google already has... Can you find one single thing over Shodan you can't with a sp…

Presumably Shodan ignores robots.txt, right?
Post reply on HN