News for hackers. Stuff that matters.
Re:Redditor finds unsecured surveillance cameras seemingly p... by casefields on Wednesday May 13, 2020 @11:53AM (#23168150)
Inside one of the cameras:

"Due to its sensitive nature, the information contained on this website is restricted to law enforcement professionals and government agencies only. For access contact us at 503-932-6899 or email us at [email protected]"

http://ipsurvconcepts.com/

Good job fellas.

Re:Redditor finds unsecured surveillance cameras seemingly p... by snypher on Wednesday May 13, 2020 @12:11PM (#23168377)
This phone number traces to Mike Bethers, Special Agent at Oregon Department of Justice. I might give them a call today and ask about these cameras.
Re:Redditor finds unsecured surveillance cameras seemingly p... by edm0nd on Wednesday May 13, 2020 @02:55PM (#23170349)
His Linkedin Bio: Specialities: Technical surveillance operations; audio, video, GPS tracking, telecom intercepts. IACIS Certified.

lol

Re:Redditor finds unsecured surveillance cameras seemingly p... by Gravyness on Wednesday May 13, 2020 @04:59PM (#23171768)
At least he didn't say he's a specialist on security
Re:Redditor finds unsecured surveillance cameras seemingly p... by kchr on Wednesday May 13, 2020 @12:24PM (#23168534)
Please post an update if you do.
[dead]
Re:Redditor finds unsecured surveillance cameras seemingly p... by zokier on Wednesday May 13, 2020 @04:24PM (#23171397)
HN is not really the place for doxing
Re:Redditor finds unsecured surveillance cameras seemingly p... by sbierwagen on Wednesday May 13, 2020 @04:35PM (#23171543)
Tell it to GP, that's the same phone number posted upthread.
Re:Redditor finds unsecured surveillance cameras seemingly p... by rolph on Wednesday May 13, 2020 @10:53PM (#23174758)
not only that its the number and name posted on the website in question for people to call regarding the site
Re:Redditor finds unsecured surveillance cameras seemingly p... by boopk on Wednesday May 13, 2020 @02:05PM (#23169761)
just echoing please post update if you do
Re:Redditor finds unsecured surveillance cameras seemingly p... by BlueGh0st on Wednesday May 13, 2020 @01:27PM (#23169304)
The website appears to be compromised. It's hosting and redirecting to webstores/spam/porn/etc.

It seems an enterprising agent decided to start building and selling his own covert camera boxes but I wonder how old these things are now. Perhaps they've been forgotten?

Re:Redditor finds unsecured surveillance cameras seemingly p... by thekevan on Wednesday May 13, 2020 @01:38PM (#23169403)
I want it to be a conspiracy. No one is intended to see the inside of the box and thus the website unless the box is compromised. So when an unauthorized person sees it and goes to that website, they see it as a spammy forgotten domain, but it's actually trying to install surveillance software to see who you are and later why you've been poking around in a box they never intended you to poke around in. (This of course includes the fact that they never intended on an internet rando finding unsecured boxes and sharing it with the world on the internet.)
Re:Redditor finds unsecured surveillance cameras seemingly p... by blaser-waffle on Wednesday May 13, 2020 @03:06PM (#23170497)
That's pretty clever.

If I had to bet money though, I'd assume something more mundane, like they are actually dumb enough to put a name and email on one of those.

Do we have any reason to think that the person posting this is not the FBI themselves? Or some other foreign surveillance types?

Re:Redditor finds unsecured surveillance cameras seemingly p... by rolph on Wednesday May 13, 2020 @03:51PM (#23171022)
this reminds me of finfisher and payloaded media files used to drop the spyware.

thus mass surveilance, or mass botnet

Re:Redditor finds unsecured surveillance cameras seemingly p... by thekevan on Thursday May 14, 2020 @01:30PM (#23182528)
Yeah, that's my romantic view, but probably unlikely.
Re:Redditor finds unsecured surveillance cameras seemingly p... by dsfyu404ed on Wednesday May 13, 2020 @01:48PM (#23169522)
The website doesn't appear to be compromised or registration expired to me. When I visited the site and presented a boring old chrome on mac useragent I got the following page back.

https://i.postimg.cc/D0GxnRdY/Screen-Shot-2020-05-13-at-1-44...

When I followed the link to the login page I got an error trace.

Re:Redditor finds unsecured surveillance cameras seemingly p... by vsareto on Wednesday May 13, 2020 @02:01PM (#23169713)
Google:

site:http://ipsurvconcepts.com/

You'll find stuff in /userfiles serving all sorts of shady things that have nothing to do with the site.

Re:Redditor finds unsecured surveillance cameras seemingly p... by dsfyu404ed on Wednesday May 13, 2020 @02:07PM (#23169789)
Makes sense. I didn't really want to poke at the server itself in a manner any more in depth than firing a web browser at the thing in the normal manner.
Re:Redditor finds unsecured surveillance cameras seemingly p... by 0xdeadb00f on Wednesday May 13, 2020 @09:52PM (#23174301)
The website is suspiciously gone now. Looks like the domain is for sale?
Re:Redditor finds unsecured surveillance cameras seemingly p... by mdszy on Wednesday May 13, 2020 @03:35PM (#23170846)
That's not necessarialy a sign of the site being compromised, I've had that happen to my own domains by:

1. Host an application on some VPS with a static IP on a domain.

2. Destroy the VPS server but don't change the domain entry.

3. Boom, domain now seems to be hosting porn or other random stuff eventually as the IP in the A record gets used for other things.

Re:Redditor finds unsecured surveillance cameras seemingly p... by 0xdeadb00f on Wednesday May 13, 2020 @09:50PM (#23174279)
> Inside one of the cameras:

> "Due to its sensitive nature, the information contained on this website is restricted to law enforcement professionals and government agencies only. For access contact us at 503-932-6899 or email us at [email protected]"

> http://ipsurvconcepts.com/

> Good job fellas.

Domain is gone. For sale.

Re:Redditor finds unsecured surveillance cameras seemingly p... by enjoyyourlife on Wednesday May 13, 2020 @06:58PM (#23172845)
Re:Redditor finds unsecured surveillance cameras seemingly p... by 1cvmask on Wednesday May 13, 2020 @01:49PM (#23169541)
The login is insecure and lacks ssl.
Re:Redditor finds unsecured surveillance cameras seemingly p... by sitkack on Wednesday May 13, 2020 @04:53PM (#23171712)
Definitely needs SSLv3
Re:Redditor finds unsecured surveillance cameras seemingly p... by riffic on Wednesday May 13, 2020 @01:48PM (#23169524)
couldn't be bothered to configure HTTPS on their web server properly.