Live data from Hacker News

I scanned Austria

blog.haschek.at

11–20 of 69 posts

Re: I scanned Austria

#11
post #6

Slightly off topic, but I noticed it in the article. You can run "wc" directly, you don't need to pipe from cat. Especially since cat on any sufficiently large file takes quite a while.

It's sometimes easier when you're composing command lines: `cat foo | bar` is easier to transform into `cat foo | baz` (esp. when foo or bar are rather long).

Also, piping doesn't mean that cat does all its work and only then will it be passed into wc, cat only acts as a rather tiny buffer.

Re: I scanned Austria

#12
post #5

I think soon or later we will need some kind of public institution that will do this sort of scans; all those unsecured IoT printers, vacuum cleaners, fridges, abandoned servers, Synology servers, etc. would become a real threat at some point and the costs of dealing with issues caused by them like identity theft, false accusations because on someone's server there is child porn uploaded by a cracker, bot nets will b…

We don't need public institutions. It's the responsibility of ISPs to prevent security problems, spam zombie servers/appliances etc. in their networks, so they should perform these scans and warn first, then disconnect customers with problematic devices.

Re: I scanned Austria

#13
post #5

I think soon or later we will need some kind of public institution that will do this sort of scans; all those unsecured IoT printers, vacuum cleaners, fridges, abandoned servers, Synology servers, etc. would become a real threat at some point and the costs of dealing with issues caused by them like identity theft, false accusations because on someone's server there is child porn uploaded by a cracker, bot nets will b…

We don't need public institutions. It's the responsibility of ISPs to prevent security problems, spam zombie servers/appliances etc. in their networks, so they should perform these scans and warn first, then disconnect customers with problematic devices.

Charge per device access? And those devices need certificates of worthiness similar to cars MOT certificates (UK example)

An interesting idea.

What is the minimum viable "superhighway-fitness" of a device?

Re: I scanned Austria

#14
post #6

Slightly off topic, but I noticed it in the article. You can run "wc" directly, you don't need to pipe from cat. Especially since cat on any sufficiently large file takes quite a while.

Wc will give you filename, if you only need number use cat first.

Re: I scanned Austria

#16
What's the best way to inform owner of unsecured device about vulnerabilities and simple ways to fix them? On printers one could just print out a message, but what about webcams or home automation systems?

Re: I scanned Austria

#17
post #5

I think soon or later we will need some kind of public institution that will do this sort of scans; all those unsecured IoT printers, vacuum cleaners, fridges, abandoned servers, Synology servers, etc. would become a real threat at some point and the costs of dealing with issues caused by them like identity theft, false accusations because on someone's server there is child porn uploaded by a cracker, bot nets will b…

In germany the federal bureau of security in IT actually does that. They send the admins an email: https://www.bsi.bund.de/EN/Topics/IT-Crisis-Management/CERT-...

Re: I scanned Austria

#18

I scanned public writable ftps for months back between 97-99 to distribute warez. I Think it was those gov ranges that cost me the relationship with a few ISPs.

Tell us more (I love to hear things about the wares days).

Re: I scanned Austria

#19
post #16

What's the best way to inform owner of unsecured device about vulnerabilities and simple ways to fix them? On printers one could just print out a message, but what about webcams or home automation systems?

I wouldn't do anything myself, too risky. Printing on somebody's else printer could get me sued.

What about a state level authority doing this scans, contacting owners, maybe even fining them? That would be like authorities for food safety, etc. It would put pressure on manufacturers because people don't want to buy things that get their owners fined.

Re: I scanned Austria

#20
post #5

I think soon or later we will need some kind of public institution that will do this sort of scans; all those unsecured IoT printers, vacuum cleaners, fridges, abandoned servers, Synology servers, etc. would become a real threat at some point and the costs of dealing with issues caused by them like identity theft, false accusations because on someone's server there is child porn uploaded by a cracker, bot nets will b…

We don't need public institutions. It's the responsibility of ISPs to prevent security problems, spam zombie servers/appliances etc. in their networks, so they should perform these scans and warn first, then disconnect customers with problematic devices.

I like the distributed spirit of this, but it only works where there is another layer holding the ISPs accountable - whether it's other ISPs or a government body. Right now their incentives are only to satisfy customers' perceived needs, which leaves nobody incentivized to prevent endpoint-to-endpoint harm.
Post reply on HN