« shodan » - SeenThis

schrödinger 19/11/2014

SCARY: Russian website shows 73.000+ of unsecured webcams around the world

https://cms-images.idgesg.net/images/article/2014/11/unsecured-ipcamera-100529202-large.idge.jpg

https://cms-images.idgesg.net/images/article/2014/11/unsecured-linksys-100529203-large.idge.jpg

https://cms-images.idgesg.net/images/article/2014/11/unsecured-foscam-100529201-large.idge.jpg

►http://www.insecam.cc

Sometimes administrator (possible you too) forgets to set the default password on security surveillance system, online camera or DVR. This site now contains access only to cameras without a password and it is fully legal. Such online cameras are available for all internet users. To browse cameras just select the country or camera type.
This site has been designed in order to show the importance of the security settings. To remove your public camera from this site and make it private the only thing you need to do is to change your camera default password.

With a simple click you can also see where the cam is roughly located in Google Maps

Where the site is located:
▻http://www.tcpiputils.com/browse/ip-address/88.212.208.213

Tips on how to find these webcams:
▻http://www.insecam.cc/faq

https://s3.yimg.com/bt/api/res/1.2/uScNkDa0SPDoGNQ0MjhMDw--/YXBwaWQ9eW5ld3M7cT04NTt3PTYzMA--/http://l.yimg.com/os/publish-images/news/2014-11-10/15b08980-68c3-11e4-ad72-8bde32c60e3f_Screen-Shot-2014-11-10-at-6-19-20-PM.png

Other sites:
►http://www.shodanhq.com
▻http://www.opentopia.com/hiddencam.php

poke @homlett
▻http://seenthis.net/recherche?recherche=shodan

Links:
▻http://www.slate.com/blogs/future_tense/2014/11/11/insecam_website_allows_spying_on_security_camera_footage_online_spying_on.htm
▻http://www.networkworld.com/article/2844283/microsoft-subnet/peeping-into-73-000-unsecured-security-cameras-thanks-to-default-passw
▻http://www.courrierinternational.com/article/2014/11/05/vous-allez-pouvoir-espionner-la-terre-entiere
▻http://www.levif.be/actualite/international/ce-site-recensant-des-milliers-de-cameras-de-surveillance-vous-propose-d-espionner-la-terre-entiere/article-normal-324151.html

http://upload.wikimedia.org/wikipedia/commons/7/7e/Graffiti_in_Shoreditch%2C_London_-_Zabou%2C_Privacy_%2812887906353%29.jpg

(credits: picture above: ▻http://zabou.me)

#webcam
#Shodan
#IoT
#privacy
#ignorance_is_what_ignorance_does

schrödinger

Fil @fil 21/11/2014

le site (insecam) ne fonctionne plus

Fil @fil
schrödinger @erratic 21/11/2014

UPDATE 21/11/2014
Owner of insecam.com already removed all the information of his web site.
With humour.
http://img15.hostingpics.net/pics/834089insecamcom.jpg
Apparently some instances worked on objecting the site’s content:
UK moves to shut down Russian hackers streaming live British webcam footage
▻http://www.theguardian.com/technology/2014/nov/20/webcam-hackers-watching-you-watchdog-warns
The site, which has been operating for a month, has become the source of concern for data watchdogs across the world. Graham said: “I think this started in Macau and Hong Kong; they alerted the Australians, the Australians alerted the Canadians, he Canadians alerted us. We have known about this for about 24 hours and we’ve been working out how best to deal with it. This is a good example of cooperation between data protection authorities across the world.”
Administrator of insecam speaks:
▻http://www.redherring.com/internet/admin-defends-webcam-streaming-site-authorities-condemn-privacy-invasion
“I had a database of 160,000 cameras with default passwords,” added the admin, who vowed to shut down any ‘unethical’ feeds manually. “About 110,000 became unavailable because of changed passwords by owners. It is a good result. These people were watched for a many years and now they got a chance to know about the problem.”

schrödinger @erratic
schrödinger @erratic 25/11/2014

UPDATE 25/11/2014
Site is back, only showing public cameras, without password.
►http://www.insecam.cc
The following changes were made to InSeCam for the protection of individual privacy:
– All automatically collected cameras are removed from the site and only filtered cameras are available now. This way none of the cameras on Insecam invade anybody’s private life.
– InSeCam has also removed all cameras that still use default password settings. Only public cameras without password protection at all are available on Insecam.
– Any camera will be removed immediately upon e-mail complaint. Please provide a direct link to help facilitate the prompt removal of the camera.
– If you do not want to contact us by e-mail, you can still remove your camera from InSeCam, the only thing you need to do is to set the password of your camera.
backup: ▻https://web.archive.org/web/20141125142027/http://www.insecam.cc

schrödinger @erratic

Écrire un commentaire