Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

A Warning to Users of NurseryCam

cybergibbons.com

Post reply on HN
Print view View original

11–20 of 75 posts

Re: A Warning to Users of NurseryCam

#11

Post by jowsie »

mplewis wrote: post #9
netsharc wrote: post #7

I guess this comment will be burned to the ground [instead of people telling me why they disagree], and yeah a single username and password is bad, but the article smells like fear-mongering. "Zomg, strangers will look at your children!", even though the kids are in a place that is semi-public, and the viewers are mostly remote. Hmm, then again, if someone was filming my children, I'd be creeped out. And if someone w…

Is your child's bedroom semi-public?

This is a system sold to commercial nurseries, not installed in peoples homes.

Re: A Warning to Users of NurseryCam

#12

Post by Limb »

KaiserPro wrote: post #2

The whole saga is just utterly insane. Its the same people who shipped the "people counting" raspberry pi system with the bruno mars mp3s in them. First they try and report the security consultants to the police, then they claim that they are too expensive to work with. Then even more bizarrely they launch a halfarsed sock puppet campaign using the CEO's wife's account. Then they start publishing reviews on their own…

Wow the thread about the raspberry pi system was a wild ride. For anyone else who wants to give it a read: https://twitter.com/OverSoftNL/status/1357296455615197184

Re: A Warning to Users of NurseryCam

#13

Post by walrus01 »

Limb wrote: post #12
KaiserPro wrote: post #2

The whole saga is just utterly insane. Its the same people who shipped the "people counting" raspberry pi system with the bruno mars mp3s in them. First they try and report the security consultants to the police, then they claim that they are too expensive to work with. Then even more bizarrely they launch a halfarsed sock puppet campaign using the CEO's wife's account. Then they start publishing reviews on their own…

Wow the thread about the raspberry pi system was a wild ride. For anyone else who wants to give it a read: https://twitter.com/OverSoftNL/status/1357296455615197184

People should mirror this whole twitter thread and its content to use as a literal textbook example of everything not to do.

Re: A Warning to Users of NurseryCam

#14

Post by carwyn »

Limb wrote: post #12
KaiserPro wrote: post #2

The whole saga is just utterly insane. Its the same people who shipped the "people counting" raspberry pi system with the bruno mars mp3s in them. First they try and report the security consultants to the police, then they claim that they are too expensive to work with. Then even more bizarrely they launch a halfarsed sock puppet campaign using the CEO's wife's account. Then they start publishing reviews on their own…

Wow the thread about the raspberry pi system was a wild ride. For anyone else who wants to give it a read: https://twitter.com/OverSoftNL/status/1357296455615197184

There's an article over at TheRegister related to the FootFallCam saga:

https://www.theregister.com/2021/02/12/footfallcam_twitter_k...

Re: A Warning to Users of NurseryCam

#15

Post by vmception »

Out of curiosity, why is viewing nursery footage seen as serious?

Should it be patched, sure. I see it as different than some random IOT device in the crib, this is at the nursery itself.

Why are parents given access to particular feeds at a nursery?

Why does it matter that they can watch other kids at a nursery if you’re already giving this access?

Yeah I get that now ANYONE can watch them too, ooh scary men in trench coats and top hats watching children.

I’m missing something about the wording of this:

“The issues with NurseryCam are about as serious as it gets.”

Is it though?

Re: A Warning to Users of NurseryCam

#16

Post by brmgb »

orf wrote: post #6

> This blog post is intended for a non-technical audience – specifically parents and nurseries using the NurseryCam system. Good idea, but the article is full of specific technical details + technical diagrams that are irrelevant to getting the point across.

I think that statement was about the first three paragraphs and those are pretty clear and to the point.

Then again, I doubt most people are going to be particularly alarmed. The flaw means that people who know the nursery ip and the password to the camera could connect after they lose access to the website if they are tech savvy enough. Most people will probably shrug at that. It's a nursery cam for parents. What's the threat model exactly?

It might be of interest to people buying a new system however.

Re: A Warning to Users of NurseryCam

#17

Post by u678u »

vmception wrote: post #15

Out of curiosity, why is viewing nursery footage seen as serious? Should it be patched, sure. I see it as different than some random IOT device in the crib, this is at the nursery itself. Why are parents given access to particular feeds at a nursery? Why does it matter that they can watch other kids at a nursery if you’re already giving this access? Yeah I get that now ANYONE can watch them too, ooh scary men in tren…

Most of the nurseries here have big windows so everyone walking past can see nearly everything inside.

Re: A Warning to Users of NurseryCam

#18

Post by TedDoesntTalk »

vmception wrote: post #15

Out of curiosity, why is viewing nursery footage seen as serious? Should it be patched, sure. I see it as different than some random IOT device in the crib, this is at the nursery itself. Why are parents given access to particular feeds at a nursery? Why does it matter that they can watch other kids at a nursery if you’re already giving this access? Yeah I get that now ANYONE can watch them too, ooh scary men in tren…

> Out of curiosity, why is viewing nursery footage seen as serious?

pedophiles can view/record naked infants and toddlers with relative ease.

Re: A Warning to Users of NurseryCam

#19

Post by torwayburger »

vmception wrote: post #15

Out of curiosity, why is viewing nursery footage seen as serious? Should it be patched, sure. I see it as different than some random IOT device in the crib, this is at the nursery itself. Why are parents given access to particular feeds at a nursery? Why does it matter that they can watch other kids at a nursery if you’re already giving this access? Yeah I get that now ANYONE can watch them too, ooh scary men in tren…

I haven't done any research on this particular system/device myself. I skimmed this article and just finished the Twitter thread about the other product designed to count people.

Beyond the boogeymen watching the feed threat, this device itself can easily be taken over given the relaxed/non-existent security mentioned (everyone getting admin). This can in turn lead to all kinds of shenanigans ...

Re: A Warning to Users of NurseryCam

#20

Post by vmception »

torwayburger wrote: post #19
vmception wrote: post #15

Out of curiosity, why is viewing nursery footage seen as serious? Should it be patched, sure. I see it as different than some random IOT device in the crib, this is at the nursery itself. Why are parents given access to particular feeds at a nursery? Why does it matter that they can watch other kids at a nursery if you’re already giving this access? Yeah I get that now ANYONE can watch them too, ooh scary men in tren…

I haven't done any research on this particular system/device myself. I skimmed this article and just finished the Twitter thread about the other product designed to count people. Beyond the boogeymen watching the feed threat, this device itself can easily be taken over given the relaxed/non-existent security mentioned (everyone getting admin). This can in turn lead to all kinds of shenanigans ...

Ah yeah it was saying that was admin, the article didn’t go into that and was devoid of the threat greater than people watching footage
Post reply on HN