Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Shodan: The scariest search engine on the Internet

money.cnn.com

Post reply on HN
Print view View original

31–40 of 152 posts

Re: Shodan: The scariest search engine on the Internet

#31

Post by rammark »

ari_elle wrote: post #11

mhm sorry as i don't know so much about this, but how is this different from google? meaning that with a specific search in google i can find for example all kinds of cameras or systems one shouldn't find, e.g.: -) http://preview.tinyurl.com/34959u Maybe Shodan "focuses" on that, but they can't possible index more of those things than Google already has... Can you find one single thing over Shodan you can't with a sp…

Here's an example from early 2012 that I don't think would have been possible with Google:

http://console-cowboys.blogspot.com/2012/01/trendnet-cameras...

Re: Shodan: The scariest search engine on the Internet

#32

Post by D9u »

cobrausn wrote: post #21
ari_elle wrote: post #18

Earlier quoted context omitted.

it was an honest question and i don't think your reaction is appropriate behaviour for this site. If most think my comment is worthless, the voting system will make it enter the void. If others think it isn't it will be upvoted. That's how this site works. Just responding with "Shut up" adds nothing to the discussion and is something i am shocked to see on this site :(

Look at the username - likely a purpose built troll account. Not the first I've seen on HN, but it's happening more than it used to.

That's funny. I thought cobrausn was a "purpose built troll account."

Re: Shodan: The scariest search engine on the Internet

#33

Post by aashaykumar92 »

This is awesome, I never knew such a thing existed! But it's also quite alarming that so many devices are connected to the internet/computers that probably shouldn't be.

So my big question is: Is there a way to solve this 'security failure'? And if so, what is it/is it feasible? For someone with malintentions, Shodan seems to be golden.

Re: Shodan: The scariest search engine on the Internet

#34

Post by wjamesg »

btilly wrote: post #22
IheartApplesDix wrote: post #16

Earlier quoted context omitted.

Crazy idea, if you don't know what you're talking about, shut the hell up.

I used to be able to tell people like you to go back to Reddit. Unfortunately the quality of HN has declined far enough that your content-free insulting of a decent question is not immediately recognizable as something with no place here. I consider that fact a sad commentary on how far HN has fallen.

I'm a relatively new HN reader (~1 year) and have taken much away from my time here (much reading, few comments). I understand where you're coming from with concerns about quality; however, I resent the fact that I may be considered part of the increased readership responsible for "HN's decline"

Re: Shodan: The scariest search engine on the Internet

#35

Post by speeder »

leethax0r wrote: post #7
speeder wrote: post #2

I wonder, why noone turned off traffic lights or something like that to do mischief? Also, why no terrorist yet used those security failures to do terror? Once a random dude managed to log into ISS controls... Ever wondered what happens if some terrorist crash ISS into New York?

I don't think you could crash the ISS into New York. I don't even think that's possible. It doesn't have the engines necessary to get back to the surface.

Getting down is way easier than getting up.

ISS has some engines, crashing on earth is very simple, you can just thrust in the opposite direction that you are going (thus falling into the planet, although slowly and probably astronauts can find the attacker and put it back into orbit before anything serious happens) or you can trust in a diagonal of sorts, to slow your speed AND toward the planet (if you just accelerate toward the planet is more probably that you will only create a elongated orbit, and if you insist, you will slingshot out of orbit).

Re: Shodan: The scariest search engine on the Internet

#36

Post by GFischer »

speeder wrote: post #2

I wonder, why noone turned off traffic lights or something like that to do mischief? Also, why no terrorist yet used those security failures to do terror? Once a random dude managed to log into ISS controls... Ever wondered what happens if some terrorist crash ISS into New York?

At least over here, traffic lights fail and turn off on their own, no need for hackers :) . Now, fixing them (for example setting up a "green wave"... hmm that could be a more interesting use :)

http://en.wikipedia.org/wiki/Green_wave

Re: Shodan: The scariest search engine on the Internet

#37

Post by cobrausn »

D9u wrote: post #32
cobrausn wrote: post #21

Earlier quoted context omitted.

Look at the username - likely a purpose built troll account. Not the first I've seen on HN, but it's happening more than it used to.

That's funny. I thought cobrausn was a "purpose built troll account."

No, but YMMV.

Re: Shodan: The scariest search engine on the Internet

#38

Post by bernardom »

chm wrote: post #15

Hardware manufacturers should ship their devices with a piece of paper printed with a unique UID and password. Not "admin/1234". The owner would have the ability to change these at will, and resets would revert to the original UID/pw combination. Lost your piece of paper? Send the device back. No more trivial hacks.

My Netgear Router N600 does exactly that. There's a nice laminated sticker on the bottom with the admin password.

Re: Shodan: The scariest search engine on the Internet

#39

Post by dmiladinov »

For similar coverage about finding barely-secured devices that shouldn't have ever even been connected to the Internet, check out the Security Now! podcast, episode 396 - The Telnet-pocalypse:

http://www.grc.com/securitynow.htm

Transcripts are available in several formats:

http://www.grc.com/sn/sn-396.htm

http://www.grc.com/sn/sn-396.txt

http://www.grc.com/sn/sn-396.pdf

Post reply on HN