u/niko-rin r/netsec • Recommends
Defcon 20 - Dan Tentler - Drinking from the caffeine firehose we know as shodan
- YouTube
0:00 / 0:00
Defcon 20 - Dan Tentler - Drinking from the caffeine firehose we know as shodan
vissago
1.8K subscribers • 1 video on Hallway
- Recommended by 4 people: 3 on Hacker News and 1 in engineering communities.
- A classic. People kept recommending it from 2012 to 2019.
- Presented by Dan Tentler
Intermediate. Assumes working knowledge.
181K views14 years ago4 recommendations
SecurityExploits and vulnerabilitiesNetworking and protocols
Dan Tentler showcases various critical, non-computer devices like stoplights and power systems exposed to the public internet without credentials.
My presentation at Defcon 20 on the wacky things I've found on the internet via shodan that are not computers, routers, switches or the 'typical' things you look for when keeping computer security in mind.Why it's here
4 people recommend thisWhat people say. Recommended as an eye-opening and scary look at how many critical infrastructure and IoT devices are left completely unsecured on the internet.
jrvarela56on Hacker News • Recommends
On “Hacker taps into baby monitor, shouts at sleeping infant”
It's both amazing and scary that this kind of vulnerability is fairly common. Check out this great talk given at Defcon ( link to this video ) to get an idea of the magnitude. These are systems that do not require any kind of tampering or credentials. Most times credentials are given to you in a prompt!
pdkl95on Hacker News • Recommends
On “Vigilantes are working hard to infect IoT devices with the Hajime botnet”
Defcon 20 - Dan Tentler - "Drinking from the caffeine firehose we know as shodan" link to this video Warning - watching this may readjust your faith in humanity. Telnet is just the tip of the iceberg. edit: (15:42) "Econolite stoplights listening on telnet. There are intersections with stoplights; you can telnet into them and put them in 'test mode'sic, and the warning says, 'Don't do this, you could kill people!'"
dmitriidon Hacker News • Recommends
On “The NYC subway system runs on OS/2”
The answer is: quite probably. A lot of old systems get retrofitted with additional features/terminals/addons on top to make them "more modern" and as a result end up being connected to the internet. A great presentation on this (and many other things) here: link to this video
u/expo53din r/netsec • Mentions
Defcon 20 Videos Thread
This thread will contain a compilation of all the Defcon 20 Videos (instead of posting them one submission at a time). Have links to any videos? Different Source? Post 'em in the comments below, and I'll edit them into this post. However, please note that the majority of the talks have not been released to the web yet.
**The Talks:**
* Owned in 60 Seconds: From Network Guest to Windows Domain Admin by Zack Fasel (Youtube)
* Hacking ~~Huawei~~ Routers by FX, PHENOELIT GROUP, RECURITY LABS (Youtube)
* Drinking from the Caffeine Firehose We Know as Shodan by Dan Tentler (Youtube)
* Shared Values, Shared Responsibility by General Keith B., US Cyber Command [(…
sabooton Hacker News • Mentions
On “Internet of Things security is so bad, there’s a search engine for sleeping kids”
It's much worse than just passive webcams. Some devices which were never meant to be connected to the internet are out there. Stoplights? HVAC Systems? Carwashes? Ice Rinks? POWER PLANTS? Yes! link to this video EDIT: I looked at his more recent talk from last November ... the situation has not improved "115 batshit stupid things you can put on the internet in as fast as I can go by Dan Tentler" link Featuring Spanish Chicken Controls
pdkl95on Hacker News • Mentions
On “Reject Google Nest or Amazon Ring Corp Surveillance and a Dystopic Future”
> Doorbell cameras aren't compelling targets for hackers They will be when people discover creative new ways to abuse them, but it doesn't even needs to be a "compelling target". Some people simply think browsing cameras on the internet is fun. link to this video