Hackers Break into Security Cameras, Exposing Tesla, Jails, Hospitals
1–10 of 21 posts
Re: Hackers Break into Security Cameras, Exposing Tesla, Jails, Hospitals
#2> ever wondered what a mainenance backdoor root shell inside the Cloudflare or Telsa HQs would look like?
https://twitter.com/nyancrimew/status/1369390591700828170?s=...
Threadreaderapp: https://threadreaderapp.com/thread/1369373713121083395.html#...
Raw images: https://pbs.twimg.com/media/EwENVr4XIAQWMDp.jpg and https://pbs.twimg.com/media/EwENcRwWYAgxyAi.jpg
Re: Hackers Break into Security Cameras, Exposing Tesla, Jails, Hospitals
#3This is why you use Blue Iris and dedicate a NIC to isolate all your cameras from your LAN.
Re: Hackers Break into Security Cameras, Exposing Tesla, Jails, Hospitals
#4Re: Hackers Break into Security Cameras, Exposing Tesla, Jails, Hospitals
#5This is why you don't have cameras unless you've got a specific reason to.
However, nobody important in those companies is going to jail for a breach like this, so nothing will change.
Re: Hackers Break into Security Cameras, Exposing Tesla, Jails, Hospitals
#6 > Verkada Inc.
I bet some people are catching flak for going with Verkada instead of Ubiquiti because Ubiquiti charges more.
Re: Hackers Break into Security Cameras, Exposing Tesla, Jails, Hospitals
#7Cloud enabled cameras that I don't fully control are concerning to me. My guess is we will be seeing more of these types of breaches in the future.
Re: Hackers Break into Security Cameras, Exposing Tesla, Jails, Hospitals
#8This is why you use Blue Iris and dedicate a NIC to isolate all your cameras from your LAN.
Back in the day I set up Zoneminder... pretty good. I was able to write a custom perl script to run a loud wave file in my house to tell me a zone was activated :)
Re: Hackers Break into Security Cameras, Exposing Tesla, Jails, Hospitals
#9This is neat, but the whole "End Surveillance Capitalism" seems like a pretty big stretch. I'm not sure it's reasonable to think that showing a bunch of security camera footage will do anything of the sort, regardless of how damning.
Re: Hackers Break into Security Cameras, Exposing Tesla, Jails, Hospitals
#10> The hackers’ methods were unsophisticated: they gained access to Verkada through a “Super Admin” account, allowing them to peer into the cameras of all of its customers. Kottmann says they found a user name and password for an administrator account publicly exposed on the internet.
So you're telling me that the interface that grants you access to ALL of your customers' (including hospitals and schools) data and shells to the cameras doesn't even require 2FA? W...w-what?