4 ms·

"An analogy best describing this would be just because someone leaves their window open it does not give permission for an unauthorized individual to set up a c

"An analogy best describing this would be just because someone leaves their window open it does not give permission for an unauthorized individual to set up a camera outside their window and broadcast the feed worldwide," That's a terrible analogy. These webcams are accessible publicly on the web with no security. A better analogy would be, it's like leaving your window open, and your window location can be indexed by google, and your window can simultaneously be viewed by anyone around the world in their underwear. And in some cases they can pan, rotate, and zoom your window. "If we can take one lesson away from this experience, it is that default passwords do not provide protection from the threats that exist in the modern world." No, if we take away one lesson from this experience it's that the person exposing the serious issue can sometimes recieve the most criticism. Nothing is better, just back to being hidden.

sbarre 12y ago
Yeah I also thought the camera company's statement was BS. Setting a password should be part of the installation process for these kinds of products, and you should not be able to get it up and running without that step. But none of these companies want to absorb the support costs of dealing with customers who will struggle with that step (and there will be plenty, Insecam was proof of that), so they pass the risk onto their customers and then try to vilify the people who point it out.
grecy 12y ago
> "An analogy best describing this would be just because someone leaves their window open it does not give permission for an unauthorized individual to set up a camera outside their window and broadcast the feed worldwide," Actually, I'm pretty sure it does. I'm a photographer, so I'm constantly following discussions and lawsuits about it. Anything that can be photographed (or videoed) while the operator is standing on public space is fair game. I can absolutely take photos and video of the front of your house while standing on the road. If you happen to have your window down, that's your problem not mine.
- grecy 12y ago
  Downvotes because I'm wrong (legally speaking) or because you don't like the implications if I'm right? https://www.aclu.org/kyr-photo https://www.aclu.org/kyr-photo opening paragraph: "Taking photographs of things that are plainly visible from public spaces is a constitutional right "
drzaiusapelord 12y ago
>with no security. My understanding is that the site would try various manufacturer default passwords (perhaps even common passwords as well) to gain access. I think if there's access control, albiet poor, it still does not quality as "no security" or "public." Look, the blinds in my house are open like 5mm or so. If you press your face against my window you can see in. That's not public, just because its easy for you to do. >exposing the serious issue can sometimes recieve the most criticism. This wasn't some selfless security researcher. This was a monetized site. Personally, I'd like to see legislation that forces password changes on devices before they are allowed network access. The wild west of consumer electronics has given us the "internet of (compromised) things." This is not a good trend.

sbarre 12y ago

Yeah I also thought the camera company's statement was BS. Setting a password should be part of the installation process for these kinds of products, and you should not be able to get it up and running without that step. But none of these companies want to absorb the support costs of dealing with customers who will struggle with that step (and there will be plenty, Insecam was proof of that), so they pass the risk onto their customers and then try to vilify the people who point it out.

grecy 12y ago

> "An analogy best describing this would be just because someone leaves their window open it does not give permission for an unauthorized individual to set up a camera outside their window and broadcast the feed worldwide," Actually, I'm pretty sure it does. I'm a photographer, so I'm constantly following discussions and lawsuits about it. Anything that can be photographed (or videoed) while the operator is standing on public space is fair game. I can absolutely take photos and video of the front of your house while standing on the road. If you happen to have your window down, that's your problem not mine.

grecy 12y ago
Downvotes because I'm wrong (legally speaking) or because you don't like the implications if I'm right? https://www.aclu.org/kyr-photo https://www.aclu.org/kyr-photo opening paragraph: "Taking photographs of things that are plainly visible from public spaces is a constitutional right "

drzaiusapelord 12y ago

>with no security. My understanding is that the site would try various manufacturer default passwords (perhaps even common passwords as well) to gain access. I think if there's access control, albiet poor, it still does not quality as "no security" or "public." Look, the blinds in my house are open like 5mm or so. If you press your face against my window you can see in. That's not public, just because its easy for you to do. >exposing the serious issue can sometimes recieve the most criticism. This wasn't some selfless security researcher. This was a monetized site. Personally, I'd like to see legislation that forces password changes on devices before they are allowed network access. The wild west of consumer electronics has given us the "internet of (compromised) things." This is not a good trend.