Live data from Hacker News

A Warning to Users of NurseryCam

cybergibbons.com

1–10 of 75 posts

Re: A Warning to Users of NurseryCam

#2
The whole saga is just utterly insane.

Its the same people who shipped the "people counting" raspberry pi system with the bruno mars mp3s in them.

First they try and report the security consultants to the police, then they claim that they are too expensive to work with.

Then even more bizarrely they launch a halfarsed sock puppet campaign using the CEO's wife's account.

Then they start publishing reviews on their own staff, including private health info.

Just utterly bat shit insane

Re: A Warning to Users of NurseryCam

#4

The whole saga is just utterly insane. Its the same people who shipped the "people counting" raspberry pi system with the bruno mars mp3s in them. First they try and report the security consultants to the police, then they claim that they are too expensive to work with. Then even more bizarrely they launch a halfarsed sock puppet campaign using the CEO's wife's account. Then they start publishing reviews on their own…

> First they try and report the security consultants to the police, then they claim that they are too expensive to work with.

Hahaha what? Are you saying they paid these guys, then reported them to the police, and then the police found a contract and they just said "well they're too expensive!"

> Then even more bizarrely they launch a halfarsed sock puppet campaign using the CEO's wife's account.

Sure, why not?

> Then they start publishing reviews on their own staff, including private health info.

I am so confused. I read the article and still don't understand this comment.

Re: A Warning to Users of NurseryCam

#5
The short version:

For all parents connecting to a given nursery, they are given the same username and password for the DVR. In the examples I have been shown, the username is admin and the password is either admin888 or nurserycam888.

Sigh.

Re: A Warning to Users of NurseryCam

#6
> This blog post is intended for a non-technical audience – specifically parents and nurseries using the NurseryCam system.

Good idea, but the article is full of specific technical details + technical diagrams that are irrelevant to getting the point across.

Re: A Warning to Users of NurseryCam

#7
I guess this comment will be burned to the ground [instead of people telling me why they disagree], and yeah a single username and password is bad, but the article smells like fear-mongering. "Zomg, strangers will look at your children!", even though the kids are in a place that is semi-public, and the viewers are mostly remote.

Hmm, then again, if someone was filming my children, I'd be creeped out. And if someone was using this to identify kids and their day-to-day patterns (e.g. pick up hours), they could theoritically show up 10 minutes earlier, say they're there sent by the parents to pick up someone, and "the kid is wearing a blue top and yellow shorts" or whatever. But IMO kidnap scares are overblown, and if a nursery falls for that trick without calling the parents first, they should be shut down for being too stupid.

Re: A Warning to Users of NurseryCam

#8
post #5

The short version: For all parents connecting to a given nursery, they are given the same username and password for the DVR. In the examples I have been shown, the username is admin and the password is either admin888 or nurserycam888. Sigh.

And they knew about the issue for over 5 years...

Re: A Warning to Users of NurseryCam

#9
post #7

I guess this comment will be burned to the ground [instead of people telling me why they disagree], and yeah a single username and password is bad, but the article smells like fear-mongering. "Zomg, strangers will look at your children!", even though the kids are in a place that is semi-public, and the viewers are mostly remote. Hmm, then again, if someone was filming my children, I'd be creeped out. And if someone w…

Is your child's bedroom semi-public?

Re: A Warning to Users of NurseryCam

#10
post #7

I guess this comment will be burned to the ground [instead of people telling me why they disagree], and yeah a single username and password is bad, but the article smells like fear-mongering. "Zomg, strangers will look at your children!", even though the kids are in a place that is semi-public, and the viewers are mostly remote. Hmm, then again, if someone was filming my children, I'd be creeped out. And if someone w…

> but the article smells like fear-mongering. "Zomg, strangers will look at your children!"

1) It should be reasonable to expect some privacy when you give your kids into the care of other people. There is a whole lot difference: someone can walk by a day care and see kids playing outside and anyone on the internet can access these systems. I don’t know how these nurseries work that use these systems, but I assume that not that many people have access to the kids, only staff and maybe other parents/guardians.

2) The company producing these camera systems claims them to be more secure than online banking. This is flat out wrong, one might even argue fraud.

Post reply on HN