4 ms·
I'd like to see someone actually name & shame the devices involved. With evidence, of course. I've had a quick poke around my house, and the couple of devices
by soneil 10y ago
I'd like to see someone actually name & shame the devices involved. With evidence, of course.
I've had a quick poke around my house, and the couple of devices I have (wemo, philips hue) are holding pretty persistent outbound http connections - not dropping their trousers and exposing telnet.
Persistently exposed telnet sounds more to me like industrial control devices, network appliances, etc. But "IoT" is so vague that we're immediately jumping to blaming consumer devices.
- travanx 10y agoDahua. And then there are the Alibaba Chinese Hikvision cameras that generally can't be firmware updated. Seems like plenty of people port forward to their cameras as most of the camera forums say over and over to use VPN and not port forward. "The specific Dahua IPC-HFWxxx old type vulnerable password was the one used to let this in, but that depends on how we apply our traps." http://blog.malwaremustdie.org/2016/10/mmd-0058-2016-elf-linuxnyadrop.html http://blog.malwaremustdie.org/2016/10/mmd-0058-2016-elf-lin...