u/sh3dowin r/ReverseEngineering • Recommends
Black Hat 2013 - Exploiting Network Surveillance Cameras Like a Hollywood Hackerhardware reverse engineering Excellent video should be watching
0:00 / 0:00
Black Hat 2013 - Exploiting Network Surveillance Cameras Like a Hollywood Hacker
HackersOnBoard
71K subscribers • 11 videos on Hallway
- Recommended by 2 people: 1 on Hacker News and 1 in engineering communities.
- Presented by Craig Heffner, security researcher
- May be out of date. The tools, versions or practices it shows have likely moved on.
Intermediate. Assumes working knowledge.
1M views12 years ago2 recommendations
SecurityExploits and vulnerabilitiesEmbedded systems
Craig Heffner demonstrates how to exploit vulnerabilities in network surveillance camera firmware to hijack video streams and execute arbitrary code.
Craig HeffnerWhy it's here
2 people recommend thisWhat people say. Recommended as a classic demonstration of the systemic security flaws and poor firmware quality found in embedded IoT devices and IP cameras.
ag_47on Hacker News • Recommends
On “Ask HN: How did Dyn fail to fend off DDOS?”
Here's a pretty fun 2 year old talk from Blackhat, re surveillance camera firmware and how s*tty they are: link to this video
dralleyon Hacker News • Mentions
On “Zero-Day Bug Allows Hackers to Access CCTV Surveillance Cameras”
Ah, security cameras. Never-updated linux boxes, frequently with homegrown http servers, often with secret hardcoded credentials in clear text laying around in the firmware blob. link to this video
runlevel1on Hacker News • Mentions
On “The Big Hack: Statements From Amazon, Apple, Supermicro, Chinese Government”
Most of the out-of-band management systems (aka IPMI/DRAC/LOM) that server vendors use are built by the same 2-3 companies and rebranded. These companies churn out some truly horrible software with little consideration for security. It's often difficult to automate firmware updates, so they tend to stay vulnerable. It's a similar situation to webcams: link to this video
stcredzeroon Hacker News • Mentions
On “U.S. Warns Of Spy Dangers Of Chinese-Made Drones”
…poor levels of security in these devices in general: DEF CON 23 - Robinson and Mitchell - Knocking my neighbors kids cruddy drone offline link However, to put things into perspective, purpose built security cameras -- even expensive ones from well reputed industry brands -- have had similar very poor levels of very poor security for many years. link to this video It's not really a problem of drones. It's a problem with the poor levels of security in consumer devices in general. It's "as if" the situation has been engineered to let bad actors do lots of spying.…
dralleyon Hacker News • Mentions
On “Avoid Consumer Routers”
>The thing I’d add is that it’s not just consumer-grade products with this problem, there are plenty of supposedly professional-grade devices where the firmware is junk too. Absolutely. An example: link to this video There are $5000 security cameras placed in very sensitive areas with security just as poor as the $50 trash you can buy from Office Depot (or at least it was the case 8 years ago).