Live data from Hacker News

Shodan: The scariest search engine on the Internet

money.cnn.com

61–70 of 152 posts

Re: Shodan: The scariest search engine on the Internet

#61
But he added that cybercriminals typically have access to botnets -- large collections of infected computers -- that are able to achieve the same task without detection.

What do botnets have to do with crawling the web for unsecured devices? I'm not sure I understand the correlation.

Re: Shodan: The scariest search engine on the Internet

#62
post #2

I wonder, why noone turned off traffic lights or something like that to do mischief? Also, why no terrorist yet used those security failures to do terror? Once a random dude managed to log into ISS controls... Ever wondered what happens if some terrorist crash ISS into New York?

At least over here, traffic lights fail and turn off on their own, no need for hackers :) . Now, fixing them (for example setting up a "green wave"... hmm that could be a more interesting use :) http://en.wikipedia.org/wiki/Green_wave

I'd like to see the local lights reprogrammed to follow the legal guidelines instead of short yellows to maximize traffic ticket revenues.

Re: Shodan: The scariest search engine on the Internet

#63
post #43
post #34

Earlier quoted context omitted.

I'm a relatively new HN reader (~1 year) and have taken much away from my time here (much reading, few comments). I understand where you're coming from with concerns about quality; however, I resent the fact that I may be considered part of the increased readership responsible for "HN's decline"

I've been lurking HN for awhile now, and complaints about HN's decline were going on even years back when I was first introduced to the site...

I've started reading HN recently after getting tired of reddit's endless 'girl, tell us about your masturbation stories' threads or r/pics and find HN so much better. I've read so many interesting articles and the comments are insanely high quality. It may not be what it used to be but it's a damn sight better than the rest of the web - especially reddit (which isn't what it used to be :p)

Re: Shodan: The scariest search engine on the Internet

#64
From Wikipedia: SHODAN (Sentient Hyper-Optimized Data Access Network) is a fictional artificial intelligence and the main antagonist of the cyberpunk-horror themed action role-playing video games System Shock and System Shock 2.

http://en.wikipedia.org/wiki/SHODAN

Kinda cool they chose that name.

Re: Shodan: The scariest search engine on the Internet

#65
post #34
post #22

Earlier quoted context omitted.

I used to be able to tell people like you to go back to Reddit. Unfortunately the quality of HN has declined far enough that your content-free insulting of a decent question is not immediately recognizable as something with no place here. I consider that fact a sad commentary on how far HN has fallen.

I'm a relatively new HN reader (~1 year) and have taken much away from my time here (much reading, few comments). I understand where you're coming from with concerns about quality; however, I resent the fact that I may be considered part of the increased readership responsible for "HN's decline"

Hopefully knowing my fuller opinion will decrease your resentment.

I suspect that new users follow something like an 90/10 rule. 90% of them are good to have around, and contribute more than they detract. New blood is good. But 10% contribute junk that is like virtual cholesterol, it builds up, clogs the system, and if left untreated eventually will be lethal to the community. of that 10%, perhaps 10% are simply toxic waste that you want to get rid of, and 90% just need encouragement to fit in better.

I sometimes comment on egregious comments by the 10%. You've reminded me that I should more often acknowledge the existence of the 90%, and on my hope that the 10% I'm looking at are part of the redeemable 9%.

There is an observation that goes back centuries, which applies here. The observation is that if you pack a barrel of apples and there is even a single bad one, the whole barrel will spoil. But if every apple is good, the barrel will remain good for the entire winter. Thus, "don't let a few bad apples spoil the barrel". We want the apples, but none of the bad ones.

Unfortunately the advent of refrigeration has caused us to forget the original wisdom and the saying is currently used as the exact reverse of its original meaning ("oh, it was just a few bad apples").

Re: Shodan: The scariest search engine on the Internet

#66

Earlier quoted context omitted.

My Netgear Router N600 does exactly that. There's a nice laminated sticker on the bottom with the admin password.

Most of those types are some sort of hash of the MAC which are quickly reversed. A quick search will contain many fruitful examples. How else do you think the default password ends up the same on a system reset?

The MAC has to be stored in flash so why not a password?

Re: Shodan: The scariest search engine on the Internet

#67
post #44

Earlier quoted context omitted.

I could be wrong, but I believe Shodan actually portscans the entire internet, whereas Google only crawls known URLs. They also index HTTP headers, which Google doesn't do. It's run by our very own achillean: https://news.ycombinator.com/threads?id=achillean

Sounds like they also attempt to authenticate using default user/pass combos.

Is that legal? I've seen all kinds of analogies like "if your neighbor leaves the front door unlocked..." or "but if you go down the street testing each lock..." but never anyone who really knew what actual criminal law says.

Re: Shodan: The scariest search engine on the Internet

#68
post #61

But he added that cybercriminals typically have access to botnets -- large collections of infected computers -- that are able to achieve the same task without detection. What do botnets have to do with crawling the web for unsecured devices? I'm not sure I understand the correlation.

The article is full of technical misconceptions, but if I had to guess:

1) Botnets give you a ton of bandwidth to run port scans or crawling searches.

2) They also allow you to "map" port scans or searches over thousands of computers (e.g. one computer in the botnet scans one specific port times ten thousand ports), obscuring the fact that a scan is even occurring.

Re: Shodan: The scariest search engine on the Internet

#69
post #61

But he added that cybercriminals typically have access to botnets -- large collections of infected computers -- that are able to achieve the same task without detection. What do botnets have to do with crawling the web for unsecured devices? I'm not sure I understand the correlation.

I think it's because you can use botnets to divide up the vast IPv4 search space among the individual bots and crawl it exponentially faster.

Re: Shodan: The scariest search engine on the Internet

#70

mhm sorry as i don't know so much about this, but how is this different from google? meaning that with a specific search in google i can find for example all kinds of cameras or systems one shouldn't find, e.g.: -) http://preview.tinyurl.com/34959u Maybe Shodan "focuses" on that, but they can't possible index more of those things than Google already has... Can you find one single thing over Shodan you can't with a sp…

> Can you find one single thing over Shodan you can't with a specific Google search?

The entire rest of the Internet? Google is great at crawling HTTP and HTTPS, but the Internet is more than the web.

Post reply on HN