I scanned Austria
blog.haschek.at
I scanned Austria
1–10 of 69 posts
Re: I scanned Austria
#2[deleted]
Re: I scanned Austria
#3It's amazing to me just how much of "security" is an illusion, random happenstance, and just being really lucky.
Considering how open, exploitable devices like this represent a significant public risk from their ability to be used to launch attacks on others, it would seem that it is high time for public regulation bureaus with the authority to issue shutdown notices and in extreme cases sequester non-compliant systems. We have radio broadcast regulators that will come physically to a pirate radio station and shut it down. We have registration and inspection systems for vehicles running on public roads to ensure a minimum safety standard. We need to do the same for the public information network.
Re: I scanned Austria
#4great work. Pretty sure you can find a lot more scary stuff online by looking for IoT (CoAP, MQTT, etc).
There was a rather scary talk by Lukas Lundgren at defcon 2016 on unauthenticated MQTT[0][1] ... the things he found exposed were just insane. He also used MASSCAN[2], a phenomenal tool, which isn't just useful to probe endpoints but also to actually send payloads (with all its performance/speed benefits).
[0] https://media.defcon.org/DEF%20CON%2024/DEF%20CON%2024%20pre...
Re: I scanned Austria
#5I think soon or later we will need some kind of public institution that will do this sort of scans; all those unsecured IoT printers, vacuum cleaners, fridges, abandoned servers, Synology servers, etc. would become a real threat at some point and the costs of dealing with issues caused by them like identity theft, false accusations because on someone's server there is child porn uploaded by a cracker, bot nets will be more costly than having some institution running routine scans and sending warnings.
Re: I scanned Austria
#6Slightly off topic, but I noticed it in the article. You can run "wc" directly, you don't need to pipe from cat. Especially since cat on any sufficiently large file takes quite a while.
Re: I scanned Austria
#7I think soon or later we will need some kind of public institution that will do this sort of scans; all those unsecured IoT printers, vacuum cleaners, fridges, abandoned servers, Synology servers, etc. would become a real threat at some point and the costs of dealing with issues caused by them like identity theft, false accusations because on someone's server there is child porn uploaded by a cracker, bot nets will b…
it's like getting your kids vaccinated
Re: I scanned Austria
#8It looks like a lot of the webcams just went down on the first few pages of that https://www.insecam.org site. Probably the HN affect giving the back some privacy.
Re: I scanned Austria
#9Exposed (Open/NoAuth) Databases in Austria:
MongoDB: 26
ElasticSearch: 14
Memcached: 4
Redis: 6
Others: Synology DiskStation NAS ftpd: 299
Re: I scanned Austria
#10I scanned public writable ftps for months back between 97-99 to distribute warez. I Think it was those gov ranges that cost me the relationship with a few ISPs.