4 ms·
There aren't so many IPv4 addresses and connections are fast enough even for residential users. If considering a botnet, even faster. There is even services th
by woliveirajr 10y ago
There aren't so many IPv4 addresses and connections are fast enough even for residential users. If considering a botnet, even faster.
There is even services that scan the whole ipv4 in less than 5 minutes: https://zmap.io/ https://zmap.io/
And a list of how to do it: http://www.securitynewspaper.com/2015/10/15/how-to-scan-whole-internet-3-7-billion-ip-addresses-in-few-minutes/ http://www.securitynewspaper.com/2015/10/15/how-to-scan-whol...
- thyrsus 10y agoI don't get it: how does the attacker initiate contact with a 192.168.0.0/16 address? Is part of the installation instructions "On your WAN router, DNAT your external address and a port to your internal address and telnet port."?
- fuzzy2 10y agoNo, but that’s what a novice would do to access the camera remotely.
- gvb 10y agoYes, except it is all automated by UPNP https://nakedsecurity.sophos.com/2013/01/29/what-if-your-security-camera-were-an-insecurity-camera/ https://nakedsecurity.sophos.com/2013/01/29/what-if-your-sec... https://en.wikipedia.org/wiki/Universal_Plug_and_Play#Problems_with_UPnP https://en.wikipedia.org/wiki/Universal_Plug_and_Play#Proble...
- thyrsus 10y agoThank you. Now I know that the first thing to do with any router I have is to disable Internet Gateway Device Protocol.
- theandrewbailey 10y agoSort of. Do you know what uPNP is? It allows a device to automatically do exactly that. https://en.wikipedia.org/wiki/Universal_Plug_and_Play https://en.wikipedia.org/wiki/Universal_Plug_and_Play