6 ms·

The Wikipedia article is unfortunately woefully out of date in describing what Shodan does. For example, Shodan collects data on thousands of ports: https://ww

The Wikipedia article is unfortunately woefully out of date in describing what Shodan does. For example, Shodan collects data on thousands of ports: https://www.shodan.io/search/facet?query=net%3A0%2F0&facet=port https://www.shodan.io/search/facet?query=net%3A0%2F0&facet=p... And we don't concentrate on a single type of device/ service (the article mentions SCADA). We identify everything from industrial control systems (1) to Minecraft servers (2). The news coverage makes it sound like we're skewed towards ICS, webcams or vulnerabilities but our focus is on providing a comprehensive view of what's connected to the Internet. If you want to quickly check if your IP is exposing anything unexpected to the Internet simply visit: https://me.shodan.io https://me.shodan.io If you see a 404 then nothing public was found. Note that this looks up information in the existing Shodan database - it doesn't launch a scan. (1) Industrial control systems: https://www.shodan.io/search/report?query=tag%3Aics https://www.shodan.io/search/report?query=tag%3Aics (2) Minecraft servers: https://www.shodan.io/search?query=minecraft https://www.shodan.io/search?query=minecraft

fragmede 5y ago
> The Wikipedia article is unfortunately woefully out of date so... did you fix it?
- lmm 5y ago
  Wikipedia policy discourages entities from editing their own page.
  - achillean 5y ago
    Bingo. Many years ago I tried to fix it but it was quickly reverted. I understand their policy though and hopefully it will get fixed at some point.
  - Talanes 5y ago
    I wonder if you could use a forum post of someone saying what's wrong on their page as a source to edit the page though. Forum posts aren't outside the realm of valid sources, so where exactly is the line drawn?
    - lmm 5y ago
      > I wonder if you could use a forum post of someone saying what's wrong on their page as a source to edit the page though. You could. The person themselves couldn't. (There are guidelines about the risk of bias from primary sources, which apply very much to someone talking about themselves or their own company, so you shouldn't just blindly copy what they say into Wikipedia, but you absolutely can use them as a source)
      - bookofjoe 5y ago
        Off-topic: this discussion reminds me a bit of what happened about five years ago when I offered to host a reddit AMA about anesthesia and anesthesiology and related subjects (I was board-certified in 1980). The moderator asked me for proof that I was who I was, so I had to spend a couple days digging through my files to find my medical school diploma, board-certification document, medical licenses, etc., then scan and email them to reddit. I did all that, and they said it wasn't sufficient proof: I needed to take a selfie with the documents and my driver's license to "prove" my bona fides. At that point I said WTF? and bagged it. No good deed goes unpunished.
        atatatat 5y ago
        What's the worst/best part of your position that people outside of it would rarely acknowledge publicly?
        bookofjoe 5y ago
        Huh?
        scubbo 5y ago
        They're trying to get the AMA started here.
    - bawolff 5y ago
      Conflict of interest is totally separate from the reliability of sources issue. I think the thing that would be encouraged in this situation is to detail what you would want changed on the talk page, and have a neutral wikipedian look at it and make the changes if appropriate. See also https://en.wikipedia.org/wiki/Wikipedia:Plain_and_simple_conflict_of_interest_guide https://en.wikipedia.org/wiki/Wikipedia:Plain_and_simple_con... That said, as far as where the line is drawn for sources see https://en.wikipedia.org/wiki/Wikipedia:Reliable_sources https://en.wikipedia.org/wiki/Wikipedia:Reliable_sources i dont think forum posts are usually considered the best sources.
eganist 5y ago
Entirely unrelated fun fact: my love for your service started a good number of years ago when you worked with me directly on a specific challenge (subject: "Any way to pay for shodan without Paypal?"). Glad to see the service is continuing to thrive! And that you're engaged in conversation/feedback on HN.
nuker 5y ago
> https://me.shodan.io https://me.shodan.io … this looks up information in the existing Shodan database - it doesn't launch a scan. But do you discard the IP or save it for future scans? :p
- achillean 5y ago
  That's not how it works. Shodan continuously checks all IPs on the Internet. When you visit the website you're checking for existing information in the database. Your use of the Shodan website/ API doesn't change how Shodan crawls the Internet.
  - tyingq 5y ago
    "all IPs on the Internet." I believe all IPV4 addresses. Skeptical on IPV6. Though the ntp pool thing was clever.
  - nuker 5y ago
    Yea, but website user IPs could be used as efficiency booster, proven to be live.
    - achillean 5y ago
      It doesn't matter. We check every IPv4 regardless. And for our regular crawling we don't ping before we try to connect as a lot of firewalls block ICMP.
  - amelius 5y ago
    How do I check my server, which doesn't have a browser installed?
    - Biganon 5y ago
      Easiest is probably a SOCKS proxy ssh -D9999 yourserver then set up the SOCKS proxy in your browser's settings
    - 5y ago

fragmede 5y ago

> The Wikipedia article is unfortunately woefully out of date so... did you fix it?

lmm 5y ago
Wikipedia policy discourages entities from editing their own page.
- achillean 5y ago
  Bingo. Many years ago I tried to fix it but it was quickly reverted. I understand their policy though and hopefully it will get fixed at some point.
- Talanes 5y ago
  I wonder if you could use a forum post of someone saying what's wrong on their page as a source to edit the page though. Forum posts aren't outside the realm of valid sources, so where exactly is the line drawn?
  - lmm 5y ago
    > I wonder if you could use a forum post of someone saying what's wrong on their page as a source to edit the page though. You could. The person themselves couldn't. (There are guidelines about the risk of bias from primary sources, which apply very much to someone talking about themselves or their own company, so you shouldn't just blindly copy what they say into Wikipedia, but you absolutely can use them as a source)
    - bookofjoe 5y ago
      Off-topic: this discussion reminds me a bit of what happened about five years ago when I offered to host a reddit AMA about anesthesia and anesthesiology and related subjects (I was board-certified in 1980). The moderator asked me for proof that I was who I was, so I had to spend a couple days digging through my files to find my medical school diploma, board-certification document, medical licenses, etc., then scan and email them to reddit. I did all that, and they said it wasn't sufficient proof: I needed to take a selfie with the documents and my driver's license to "prove" my bona fides. At that point I said WTF? and bagged it. No good deed goes unpunished.
      - atatatat 5y ago
        What's the worst/best part of your position that people outside of it would rarely acknowledge publicly?
        bookofjoe 5y ago
        Huh?
        scubbo 5y ago
        They're trying to get the AMA started here.
  - bawolff 5y ago
    Conflict of interest is totally separate from the reliability of sources issue. I think the thing that would be encouraged in this situation is to detail what you would want changed on the talk page, and have a neutral wikipedian look at it and make the changes if appropriate. See also https://en.wikipedia.org/wiki/Wikipedia:Plain_and_simple_conflict_of_interest_guide https://en.wikipedia.org/wiki/Wikipedia:Plain_and_simple_con... That said, as far as where the line is drawn for sources see https://en.wikipedia.org/wiki/Wikipedia:Reliable_sources https://en.wikipedia.org/wiki/Wikipedia:Reliable_sources i dont think forum posts are usually considered the best sources.

eganist 5y ago

Entirely unrelated fun fact: my love for your service started a good number of years ago when you worked with me directly on a specific challenge (subject: "Any way to pay for shodan without Paypal?"). Glad to see the service is continuing to thrive! And that you're engaged in conversation/feedback on HN.

nuker 5y ago

> https://me.shodan.io https://me.shodan.io … this looks up information in the existing Shodan database - it doesn't launch a scan. But do you discard the IP or save it for future scans? :p

achillean 5y ago
That's not how it works. Shodan continuously checks all IPs on the Internet. When you visit the website you're checking for existing information in the database. Your use of the Shodan website/ API doesn't change how Shodan crawls the Internet.
- tyingq 5y ago
  "all IPs on the Internet." I believe all IPV4 addresses. Skeptical on IPV6. Though the ntp pool thing was clever.
- nuker 5y ago
  Yea, but website user IPs could be used as efficiency booster, proven to be live.
  - achillean 5y ago
    It doesn't matter. We check every IPv4 regardless. And for our regular crawling we don't ping before we try to connect as a lot of firewalls block ICMP.
- amelius 5y ago
  How do I check my server, which doesn't have a browser installed?
  - Biganon 5y ago
    Easiest is probably a SOCKS proxy ssh -D9999 yourserver then set up the SOCKS proxy in your browser's settings
  - 5y ago