News for hackers. Stuff that matters.

A comment on Webcams used to attack Reddit and Twitter recalled. Parent comment

Re:Webcams used to attack Reddit and Twitter recalled by shelbyfinally on Monday October 24, 2016 @01:20PM (#12780797)
We have IP cameras (Axis) on a dedicated VLAN that doesn't have access to/from the WLAN, and things work pretty well. I don't trust VPN's (NSA clearly watered down the IPSEC standard and can definitely compromise most IPSEC connections [not sure about IKEv2]; OpenVPN is a messy pile of shit that is undoubtedly swamped with vulnerabilities), but do allow a VPN into my camera network. The compromise I made is to send a notification email for each established VPN connection, regardless of how it was established, so at least I'll probably know if someone else connects.

With Nest, you have to use their "cloud" for it to be fully functional, which to me makes it a no-go for anybody like you who is actually concerned with his/her security/privacy.

The most popular IP camera on Amazon is a Chinese camera gets your Wifi password through their app via the "cloud". Fuck that.

[ Parent | on HN ]
Re:Webcams used to attack Reddit and Twitter recalled by voltagex_ on Monday October 24, 2016 @08:31PM (#12784187)
>gets your Wifi password through their app via the "cloud".

And? What does it matter that someone has a password that's only good for about 100 metres around your house?

Of all the passwords I have, my wifi password is the one I care least about.

I'd be more worried about what the app itself is doing on my phone - I caught one attempting to update outside of the Play Store. No thanks.

[ Parent | on HN ]
Re:Webcams used to attack Reddit and Twitter recalled by yorwba on Monday October 24, 2016 @10:39PM (#12784848)
> I'd be more worried about what the app itself is doing on my phone - I caught one attempting to update outside of the Play Store.

If it is Chinese-made, that might just be because the Play Store is blocked by the Great Firewall. Apps in China need to use some other way to update.

[ Parent | on HN ]
Re:Webcams used to attack Reddit and Twitter recalled by voltagex_ on Monday October 24, 2016 @10:51PM (#12784898)
This is a great point, but the app in question was Broadlink eControl - https://play.google.com/store/apps/details?id=com.broadlink....
[ Parent | on HN ]
Re:Webcams used to attack Reddit and Twitter recalled by ryanlol on Tuesday October 25, 2016 @03:30AM (#12785938)
Made in China.
[ Parent | on HN ]