Peeping into 73,000 unsecured security cameras thanks to default passwords

  • 6 November 2014
  • 5 replies
  • 11 views

Userlevel 7
Badge +54
WOW!!!
 
By Ms. Smith
 


 
Yesterday I stumbled onto a site indexing 73,011 locations with unsecured security cameras in 256 countries …unsecured as in “secured” with default usernames and passwords. The site with an IP address from Russia is further broken down into insecure security cameras by the manufacturers Foscam, Linksys, Panasonic, some listed only as “IP cameras,” as well as AvTech and Hikvision DVRs. 11,046 of the links were to U.S. locations, more than any other country; one link could have up to eight or 16 channels, meaning that’s how many different security camera views were displayed on one page.
 
Truthfully, I was torn about linking to the site which claims to be “designed in order to show the importance of security settings;” the purpose of the site is supposedly to show how not changing the default password means that the security surveillance system is “available for all Internet users” to view. Change the defaults to secure the camera, to make it private, and it disappears from the index. According to FAQs, people who choose not to secure their cameras can write the site administrator and ask for the URL to be removed. But that implies knowing the site exists.
 
There are 40,746 pages of unsecured cameras just in the first 10 country listings: 11,046 in the U.S.; 6,536 in South Korea; 4,770 in China; 3,359 in Mexico; 3,285 in France; 2,870 in Italy; 2,422 in the U.K.; 2,268 in the Netherlands; 2,220 in Columbia; and 1,970 in India. Like the site said, you can see into “bedrooms of all countries of the world.” There are 256 countries listed plus one directory not sorted into country categories.
 
Full Article

5 replies

Userlevel 7
Holy cow.... that is actually really frightening.  A thieves and stalkers dream site.
Userlevel 7
Badge +54
It is scary and a glance at the site brings it home to you as well.
Userlevel 7
Badge +54
20 Nov, 2014 Rene Millman
 

Website shows footage of babies sleeping in cots, offices and even a pub

Webcam and CCTV owners are being urged to secure access to surveillance devices after it emerged a Russian website is making the footage available for anyone to view online.
The website, called Insecam, streams live video from thousands of webcams without the owners’ permission. The owners also have no idea their premises are being spied on.
In the UK, around 584 webcams are available to view, including feeds from offices, factories and even a pub in Egham. More ominously, children and babies can be seen sleeping in their beds.
 
Full Article.
Userlevel 7
Excellent upate article Jasper!
 
I have another, this one from CNN.  This is at least the 5th time I have seen MAJOR security news posted on the Community a week or more before the 'big guns' at CNN wake up to it.  Well done Jasper, please keep up the good work.  It is nice to know we are getting important news well ahead of the curve  :)
 
CNN Article

Russian website streams thousands of private webcams

"Many of the cameras have been installed in homes and businesses by people trying to improve security. The owner can use them to monitor their property remotely via the Internet.  But by providing public access to these devices -- including CCTV networks in shops and baby monitors -- the website is exposing their intimate moments."
 
This really is a HUGE security concern.  The website also attempts to provide GPS co-ordinates of the webcams.  That makes for a real problem when one is going on vaction and ends up broadcasting the fact that the house is empty, and its location, for any nearby thief/burglar who is also computer savvy. 
 
Userlevel 7
By Katherine Noyes
11/20/14 2:50 PM PT

 
A Russian website has been posting live video streams from unprotected webcams in homes and businesses around the globe, Britain's Information Commissioner's Office warned on Thursday.
The website has gained access to the webcams using the cameras' default login credentials, which are freely available online but often don't get changed by their owners during the set-up process.
Baby monitors and CCTV networks are among the systems that have been compromised, explained Simon Rice, the ICO's group manager for technology.
 
Full Article

Reply