4 ms·

The security cameras aren't exposed because of Google, but rather because of a website admin that didn't know what he was doing. Google's responsibly for this

by tsally 17y ago

The security cameras aren't exposed because of Google, but rather because of a website admin that didn't know what he was doing. Google's responsibly for this is akin to the responsibly a construction company has for building roads to an insecure bank. :-p

axod 17y ago
The default setting on most ip cameras is "public". I can't remember it atm, but there's another search you can do that exposes a ton of cameras of the form <uniqueID>.something.com where something is setup by the camera makers to provide an easy way to share your cam. (This isn't anything new, I was thinking of doing some analysis on all the public IP cams you can find on google a few years ago). Here's another one http://www.google.co.uk/search?hl=en&q=inurl%3A%22snapshotJPEG%22&btnG=Google+Search&meta=&aq=f http://www.google.co.uk/search?hl=en&q=inurl%3A%22snapsh... After the 1st page or so, the rest are all Panasonic IP cams. I think the answer is to have IP cam makers default to private - just like routers/hubs/etc
- dattaway 17y ago
  The default robots.txt on my Axis camera is deny. Myself and many others often change this to watch people play with the camera and catch things out of the ordinary. Mine is a 35x optical zoom, pan and tilt, have fun: http://www.dattaway.net:8000/view/viewer_index.shtml http://www.dattaway.net:8000/view/viewer_index.shtml
jacquesm 17y ago
For the majority of these I doubt there even is a website admin. I think most of these urls were found by people that have the google toolbar installed looking at their own private cameras. There are downsides to the toolbar, one of them is that google knows about urls that are never linked.
- gojomo 17y ago
  Do you have any examples where URLs that were only discovered via toolbar reporting (from one or any number of visitors) appear in Google's search results, even though never linked from any other page? Some sites use unique per-user access URLs as their only access-control; I would have expected more tales of woe if such URLs regularly received Googlebot visits or appeared in search results.
  - jacquesm 17y ago
    I've personally had the googlebot visit an under-construction site that happened to have a few juicy keywords on it. This led to a lot of trouble... Since then no more google toolbar for me. Google denied involvement, we later figured that it might have been an adsense or analytics tag as well, but there are supposedly no flows of data between those projects. The damage was done, the page should have been password protected, we learned our lesson and moved on without spending a whole lot of time on finding out if there may have been another cause, we couldn't see another one that was likely. There are plenty of other cases like this on the web, Google has always denied any kind of flow from the toolbar or adsense/analytics to their search crawler. One thing I do know: if you are building a website and you have adsense tags on the page you can not password protect it and expect to receive relevant ads because the adsense crawler can not reach your content. AFAIK the best workaround for this problem is detecting the bot and presenting a different page (or at least one without a log in). The google toolbar license ( http://tools.google.com/tools/firefox/toolbar/FT3/intl/en/install.html http://tools.google.com/tools/firefox/toolbar/FT3/intl/en/in... ) contains this little tidbit: "Google's Search Service Google Toolbar is designed to be used in conjunction with Google's search services. Accordingly, your use of Google Toolbar is also defined by Google's Terms of Service and Privacy Policy. " And nowhere does it explicitly state that the toolbar data is not used to enhance the search engine results, personally if they had no other use for it as a discovery tool then I would wonder why it was made in the first place. If google does not use the toolbar data in any way then it would be a small matter for them to say so loud and clear in the toolbar license or their privacy policy.
    - gojomo 17y ago
      Another possibility: if the page had outlinks, the URL could appear in public referrer logs elsewhere. (Pages like intranet login-only wikis often reveal their internal URL structure to outside sites that way.)
karanbhangui 17y ago
Lovely analogy. Is there a way of coming up with these, i've been trying to improve my ability to do so for a long time :P They're such useful tools in arguments.
- gojomo 17y ago
  I like to use such analogies, but have actually found them very limited for persuasive purposes, or only very effective with certain kinds of abstract thinkers. Of course, if you already agree with a speakers' point, the analogy makes sense and helps make the matter vivid. But when a listener intuitively disagrees, the analogy can derail discussion. Even though in the spirit in which it was offered, it aligns one axis of the issue at hand, with one axis of the offered analogous situation, the listener instead may focus on -- and comment about -- every other dimension of the two things that are wildly different. For some thinkers, all those other differences are easy to factor out -- of course they're different in those dimensions, and the wild variance only serves to highlight the similarity-in-one-dimension-of-interest. But for other fuzzier/holistic thinkers, every difference is a distraction to be considered separately, and the attempted analogy may harden them against your point. Worst case is when some other aspect of the analogy so dominates listeners' thought (or can be cynically flipped against you to imply you've said something you didn't mean). This is why Nazi analogies can be so conversationally-derailing -- whatever one small comparison was being intended, the response is "how dare you call [Bush|Obama|Teachers' Unions|Evangelicals|Mall Santas|etc] Nazis!"
- tsally 17y ago
  Try explaining tech stuff to tech-illiterate people. The road analogy has come in useful many times when explaining the ethics of vulnerability research and related security matters.

by tsally 17y ago

axod 17y ago

The default setting on most ip cameras is "public". I can't remember it atm, but there's another search you can do that exposes a ton of cameras of the form <uniqueID>.something.com where something is setup by the camera makers to provide an easy way to share your cam. (This isn't anything new, I was thinking of doing some analysis on all the public IP cams you can find on google a few years ago). Here's another one http://www.google.co.uk/search?hl=en&q=inurl%3A%22snapshotJPEG%22&btnG=Google+Search&meta=&aq=f http://www.google.co.uk/search?hl=en&q=inurl%3A%22snapsh... After the 1st page or so, the rest are all Panasonic IP cams. I think the answer is to have IP cam makers default to private - just like routers/hubs/etc

dattaway 17y ago
The default robots.txt on my Axis camera is deny. Myself and many others often change this to watch people play with the camera and catch things out of the ordinary. Mine is a 35x optical zoom, pan and tilt, have fun: http://www.dattaway.net:8000/view/viewer_index.shtml http://www.dattaway.net:8000/view/viewer_index.shtml

jacquesm 17y ago

For the majority of these I doubt there even is a website admin. I think most of these urls were found by people that have the google toolbar installed looking at their own private cameras. There are downsides to the toolbar, one of them is that google knows about urls that are never linked.

gojomo 17y ago
Do you have any examples where URLs that were only discovered via toolbar reporting (from one or any number of visitors) appear in Google's search results, even though never linked from any other page? Some sites use unique per-user access URLs as their only access-control; I would have expected more tales of woe if such URLs regularly received Googlebot visits or appeared in search results.
- jacquesm 17y ago
  I've personally had the googlebot visit an under-construction site that happened to have a few juicy keywords on it. This led to a lot of trouble... Since then no more google toolbar for me. Google denied involvement, we later figured that it might have been an adsense or analytics tag as well, but there are supposedly no flows of data between those projects. The damage was done, the page should have been password protected, we learned our lesson and moved on without spending a whole lot of time on finding out if there may have been another cause, we couldn't see another one that was likely. There are plenty of other cases like this on the web, Google has always denied any kind of flow from the toolbar or adsense/analytics to their search crawler. One thing I do know: if you are building a website and you have adsense tags on the page you can not password protect it and expect to receive relevant ads because the adsense crawler can not reach your content. AFAIK the best workaround for this problem is detecting the bot and presenting a different page (or at least one without a log in). The google toolbar license ( http://tools.google.com/tools/firefox/toolbar/FT3/intl/en/install.html http://tools.google.com/tools/firefox/toolbar/FT3/intl/en/in... ) contains this little tidbit: "Google's Search Service Google Toolbar is designed to be used in conjunction with Google's search services. Accordingly, your use of Google Toolbar is also defined by Google's Terms of Service and Privacy Policy. " And nowhere does it explicitly state that the toolbar data is not used to enhance the search engine results, personally if they had no other use for it as a discovery tool then I would wonder why it was made in the first place. If google does not use the toolbar data in any way then it would be a small matter for them to say so loud and clear in the toolbar license or their privacy policy.
  - gojomo 17y ago
    Another possibility: if the page had outlinks, the URL could appear in public referrer logs elsewhere. (Pages like intranet login-only wikis often reveal their internal URL structure to outside sites that way.)

karanbhangui 17y ago

Lovely analogy. Is there a way of coming up with these, i've been trying to improve my ability to do so for a long time :P They're such useful tools in arguments.

gojomo 17y ago
I like to use such analogies, but have actually found them very limited for persuasive purposes, or only very effective with certain kinds of abstract thinkers. Of course, if you already agree with a speakers' point, the analogy makes sense and helps make the matter vivid. But when a listener intuitively disagrees, the analogy can derail discussion. Even though in the spirit in which it was offered, it aligns one axis of the issue at hand, with one axis of the offered analogous situation, the listener instead may focus on -- and comment about -- every other dimension of the two things that are wildly different. For some thinkers, all those other differences are easy to factor out -- of course they're different in those dimensions, and the wild variance only serves to highlight the similarity-in-one-dimension-of-interest. But for other fuzzier/holistic thinkers, every difference is a distraction to be considered separately, and the attempted analogy may harden them against your point. Worst case is when some other aspect of the analogy so dominates listeners' thought (or can be cynically flipped against you to imply you've said something you didn't mean). This is why Nazi analogies can be so conversationally-derailing -- whatever one small comparison was being intended, the response is "how dare you call [Bush|Obama|Teachers' Unions|Evangelicals|Mall Santas|etc] Nazis!"
tsally 17y ago
Try explaining tech stuff to tech-illiterate people. The road analogy has come in useful many times when explaining the ethics of vulnerability research and related security matters.