Flaw in Home Security Cameras Exposes Live Feeds to Hackers

  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

--742952673-413726209-1328775001=:10803
Content-Type: TEXT/PLAIN; FORMAT=flowed; CHARSET=UTF-8
Content-ID: <alpine.DEB.2.02.1202090216212.10973-+lq4ijtN3NWD1tnzEPnUTA@public.gmane.org>
Content-Transfer-Encoding: quoted-printable

http://www.wired.com/threatlevel/2012/02/home-cameras-exposed/

By Kim Zetter
Threat Level
Wired.com
February 7, 2012

A flaw in home security cameras made by Trendnet potentially exposed=20
thousands of customers to hackers who could access the live video feeds=20
without a password.

The vulnerability was discovered by a blogger who uses the name=20
=E2=80=9CsomeLuser=E2=80=9D and who posted details of the flaw in January=
, describing=20
how he was able to find vulnerable cameras online by using the Shodan=20
search engine, which allows users to find internet-connected devices=20
using simple search terms.

Although users can set up the cameras with a password, the videostream=20
from even a password-protected camera is available to anyone who knows=20
the camera=E2=80=99s net address, which consists of an IP address, and a=20
sequence of 15 digits that are the same for every computer. In this=20
manner, the blogger says he was able to identify 350 vulnerable Trendnet=20
cameras.

=E2=80=9CThere does not appear to be a way to disable access to the video=
=20
stream, I can=E2=80=99t really believe this is something that is intended=
 by the=20
manufacturer. Lets see who is out there :),=E2=80=9D he wrote in his post=
.

[...]


--742952673-413726209-1328775001=:10803
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_____________________________________________________
Did a friend send you this article? Make it your
New Year's Resolution to subscribe to InfoSec News!
http://www.infosecnews.org/mailman/listinfo/isn
--742952673-413726209-1328775001=:10803--