81–90 of 94 posts
As a person just starting to explore ip cameras, can anyone suggest any resources to tell if my cameras are already infected? If so, what to do? If they are only accessible locally, within the home's local intranet, it that safer?
2 are they? have you scanned yourself? even something from the kooky Gibson should be enough https://www.grc.com/shieldsup
As a person just starting to explore ip cameras, can anyone suggest any resources to tell if my cameras are already infected? If so, what to do? If they are only accessible locally, within the home's local intranet, it that safer?
Watch the traffic coming out of it.
I'm writing personal home automation stuff and will be wiring up a handful of IoT SmartPlugs.
With all this IoT stuff i'm starting to wonder if buying a 2nd router to isolate the IoT, or perhaps a "really good" router with features designed for monitoring IoT.
Regardless, this is a problem i won't be able to ignore. So any advice is appreciated :)
Earlier quoted context omitted.
I thought that is only with old (like 1 year or older) OS versions? Aren't remote exploits quite rare?
I don't think a rule of thumb like that is really valid. Someone could be scanning for hosts with zero days right now.
Earlier quoted context omitted.
Does your ISP allow you to get your own modem? I did this recently at home (saves money after owning it for a year, as it's "paid off" then in monthly modem rental fees), and although I have problems with the level of control my ISP has over the modem (there's no configurations or login, you activate it on their network and they control it fully), it's now just a "dumb modem" and does nothing else.
Yes, in fact I have my own modem. When I bought this one, it seemed to be the only 4G modem with dual antennas, ethernet ports & wlan.
Earlier quoted context omitted.
I don't think a rule of thumb like that is really valid. Someone could be scanning for hosts with zero days right now.
Yes, but aren't zero day remote exploits very rare?
Earlier quoted context omitted.
Watch the traffic coming out of it.
Any tips on how to do this (for those of us not educated in monitoring traffic)? I'm writing personal home automation stuff and will be wiring up a handful of IoT SmartPlugs. With all this IoT stuff i'm starting to wonder if buying a 2nd router to isolate the IoT, or perhaps a "really good" router with features designed for monitoring IoT. Regardless, this is a problem i won't be able to ignore. So any advice is appr…
Or, if you have a non-switching hub, you can use that instead of a PC with two NICs.
Earlier quoted context omitted.
>The safest thing to do for home routers is to kill UPNP No no no!!!! This is going about it completely the wrong way and is setting us up for failure come IPv6 (if it's not already a thing for you). We need half-decent security practices not a temporary workaround that requires user intervention. In this case a randomly generated password printed somewhere inside the device's box or on the device itself is enough to…
Yes. Yes. Yes. An internet that requires devices to be publicly exposed to the entire internet, and directly addressable at all times, is not an internet I want to participate in. You WILL negotiate a firewall, before learning anything about the devices I use. ESPECIALLY if I am prevented from knowing their internals, whether by willful disclosure or unlawful reverse engineering. I control The Spice. I control the un…
Earlier quoted context omitted.
I don't get it: how does the attacker initiate contact with a 192.168.0.0/16 address? Is part of the installation instructions "On your WAN router, DNAT your external address and a port to your internal address and telnet port."?
Yes, except it is all automated by UPNP https://nakedsecurity.sophos.com/2013/01/29/what-if-your-sec... https://en.wikipedia.org/wiki/Universal_Plug_and_Play#Proble...