Re:About the March 8 and 9, 2021 Verkada camera hack
by pmlnr on Wednesday March 10, 2021 @05:36PM
(#26417377)
> why remote-accessible cameras are bad
Because that access is not as limited as it sounds, that's why.
Re:About the March 8 and 9, 2021 Verkada camera hack
by ALittleLight on Wednesday March 10, 2021 @05:58PM
(#26417618)
You have to think about the trade off between not having remote accessible cameras versus having them. If you can make systems more secure by eliminating them, you can become very secure and simultaneously not very useful.
Not having remote accessible cameras would seemingly make using the cameras take longer or be less efficient. In turn, that might make detecting or tracking physical intrusions less efficient and/or less successful. Should Cloudflare take that trade off? I think it depends on their threat model.
While Verkada may have not been the best choice, I fail to understand why remote-accessible cameras are bad? In fact, I'd say they are crucial at the level of security & monitoring needed by a company like Cloudflare.