Live data from Hacker News

A podcast that hacks Ring camera owners live

vice.com

11–20 of 283 posts

Re: A podcast that hacks Ring camera owners live

#12

I read this and I'm not sure how to feel. This is the real world impact of devices that can actually impact our lives being internet accessible and with security that doesn't match. That's not to say a simple password and email isn't secure enough, just that there's much bigger repercussions when your nest gets hacked as opposed to your GrubHub account.

Having your life compromised is never comfortable, but it's never less comfortable then when you suddenly realize you're being watched and having your home "invaded" in a potentially very personal way.

So if I understand it, the scenario is the digital equivalent of someone who uses a single key to fit every lock in their lives -- front door, back door, car door, ignition, safe deposit box, etc...

The key is stolen, possibly through no specific fault of the owner, and the owner may not realize it has even happened...

...and then these discord shock jocks go off and brute force these compromised email/password combinations until they stumble upon a working pair and then the hapless victim is subjected to the electronic analog of them unlocking the front door of their home and bursting into the living room yelling "hahaha gotcha, kill yourself!"

...all in order to increase their views/ratings.

I think it's just a shitty thing to do, but even more so when it involves children, or people who have no control over the cameras (like animal shelter workers)... I suppose _maybe_ if they made an effort to alert the owner first, an email "hey we have your u/p, if you don't change it in 72 hours you're going to be on our show"...

I think the nulledcast crew ought to take a lesson from Jon Stewart: BE A FUCKING PERSON ... think about how shitty what you're doing is, and no, the fact that these people are saps with insecure logins does not mean they deserve this.

Re: A podcast that hacks Ring camera owners live

#13

I read this and I'm not sure how to feel. This is the real world impact of devices that can actually impact our lives being internet accessible and with security that doesn't match. That's not to say a simple password and email isn't secure enough, just that there's much bigger repercussions when your nest gets hacked as opposed to your GrubHub account.

Having your life compromised is never comfortable, but it's never less comfortable then when you suddenly realize you're being watched and having your home "invaded" in a potentially very personal way. So if I understand it, the scenario is the digital equivalent of someone who uses a single key to fit every lock in their lives -- front door, back door, car door, ignition, safe deposit box, etc... The key is stolen,…

I'm trying to figure out exactly how these ring hacks are happening. My whole family and extended family is concerned about them. So just to be clear, there isn't a known vuln with Ring specifically, right? It's just that people's email/passwords are getting popped somewhere else on the internet, and then because of password reuse their Ring account is also compromised? Is that the gist of it?

Re: A podcast that hacks Ring camera owners live

#14
post #2

It's obviously bad to hack into a citizen's systems without consent, but there's some kind of value that might be created here. Ring cameras are basically being used as a gigantic police-partnered dragnet: Amazon’s Ring Planned Neighborhood “Watch Lists” Built on Facial Recognition https://theintercept.com/2019/11/26/amazon-ring-home-securit... If this provides a disincentivize to an average user buying Ring cameras,…

>Ring cameras are basically being used as a gigantic police-partnered dragnet:

Isn't that sort of like saying humans are basically used as a gigantic police-partnered dragnet...seeing as our entire criminal system is primarily driven by eye witnesses of crimes?

Only what we know is eye-witnesses often have conflicting testimony, some will refuse to assist police officers (out of concern for their own safety or they just don't give a shit), and others outright lie.

For example, a UFC fighter's step-daughter was recently kidnapped and murdered (abducted right from a gas station)...video would later assist identify the suspect and lead to arrest, but also identify eye witnesses to the abduction (who never came forward because they "didn't want to get involved") but after the video identified the witnesses, their testimony ended up being important.

Re: A podcast that hacks Ring camera owners live

#15

Earlier quoted context omitted.

Having your life compromised is never comfortable, but it's never less comfortable then when you suddenly realize you're being watched and having your home "invaded" in a potentially very personal way. So if I understand it, the scenario is the digital equivalent of someone who uses a single key to fit every lock in their lives -- front door, back door, car door, ignition, safe deposit box, etc... The key is stolen,…

I'm trying to figure out exactly how these ring hacks are happening. My whole family and extended family is concerned about them. So just to be clear, there isn't a known vuln with Ring specifically, right? It's just that people's email/passwords are getting popped somewhere else on the internet, and then because of password reuse their Ring account is also compromised? Is that the gist of it?

Thats it. And as messed up as it is maybe people will finally wake up to using better passwords. I'm really tired of local news covering this stuff and barely mentioning or not mentioning at all how the "hackers" are getting into the accounts.

Re: A podcast that hacks Ring camera owners live

#18
post #2

It's obviously bad to hack into a citizen's systems without consent, but there's some kind of value that might be created here. Ring cameras are basically being used as a gigantic police-partnered dragnet: Amazon’s Ring Planned Neighborhood “Watch Lists” Built on Facial Recognition https://theintercept.com/2019/11/26/amazon-ring-home-securit... If this provides a disincentivize to an average user buying Ring cameras,…

>Ring cameras are basically being used as a gigantic police-partnered dragnet: Isn't that sort of like saying humans are basically used as a gigantic police-partnered dragnet...seeing as our entire criminal system is primarily driven by eye witnesses of crimes? Only what we know is eye-witnesses often have conflicting testimony, some will refuse to assist police officers (out of concern for their own safety or they j…

A police camera watching a gas station is not the same as a police camera watching your front door.

Re: A podcast that hacks Ring camera owners live

#19

Earlier quoted context omitted.

Having your life compromised is never comfortable, but it's never less comfortable then when you suddenly realize you're being watched and having your home "invaded" in a potentially very personal way. So if I understand it, the scenario is the digital equivalent of someone who uses a single key to fit every lock in their lives -- front door, back door, car door, ignition, safe deposit box, etc... The key is stolen,…

I'm trying to figure out exactly how these ring hacks are happening. My whole family and extended family is concerned about them. So just to be clear, there isn't a known vuln with Ring specifically, right? It's just that people's email/passwords are getting popped somewhere else on the internet, and then because of password reuse their Ring account is also compromised? Is that the gist of it?

Correct, there are no actual vulnerabilities in the hardware or whatever. It's that people are re-using passwords, getting phished etc.

But... based on the number of people I've seen had their Facebook account "hacked", there are going to be lots and lots of potential victims here. Enable 2fa, use a unique password for this account, and this will never happen to you.

Re: A podcast that hacks Ring camera owners live

#20

Earlier quoted context omitted.

>Ring cameras are basically being used as a gigantic police-partnered dragnet: Isn't that sort of like saying humans are basically used as a gigantic police-partnered dragnet...seeing as our entire criminal system is primarily driven by eye witnesses of crimes? Only what we know is eye-witnesses often have conflicting testimony, some will refuse to assist police officers (out of concern for their own safety or they j…

A police camera watching a gas station is not the same as a police camera watching your front door.

No, but my camera watching what happens outside of my house is also not the same as a police camera. I didn't have such a camera at my old house, but if I did, there were several happenings that would have been reported to police.
Post reply on HN