News for hackers. Stuff that matters.
Re:How criminals are using jammers, deauthers to disrupt WiF... by gmiller123456 on Wednesday October 05, 2022 @01:26AM (#33091609)
I went with the wired network route. I'm sure to most people it seems like the more secure route, but it's important to realize that for outside cameras, you now have ethernet connections accessible from outside. Jamming WiFi is a denies you the ability to record, but external ethernet gives them access to your network. I went with building an isolated network, but I think that's outside the relm of what most consumers can do. A WiFi camera, while not perfect, really does give you the best bang for the buck.

I'm sure we all know that most residential locks can be picked with relative ease, but criminals rarely go through the trouble. The one time a person did "break in" to my house, they just opened an unlocked door. Usually I keep that door locked, a large piece of plywood in front of it, and a table saw braced up against that. Just so happened I worked on a project that day and just forgot to lock the door. Lucky break for her, but trying enough doorknobs she was bound for find some. She had gotten into two other houses that night. She was also tripped out on meth and couldn't have operated a WiFi jammer if she wanted to.

So, yea, a WiFi camera isn't great, but it's still going to get 99% of criminals out there. Next we just need WiFi jammer alarms.

Re:How criminals are using jammers, deauthers to disrupt WiF... by donkeyd on Wednesday October 05, 2022 @07:14AM (#33093882)
> So, yea, a WiFi camera isn't great, but it's still going to get 99% of criminals out there. Next we just need WiFi jammer alarms.

All we need is onboard storage to record a couple hours of video locally which can then be synced when the connection is back again. Right? That doesn't fix real-time information transmission, but video is most often important for finding suspects after the fact.

Re:How criminals are using jammers, deauthers to disrupt WiF... by richrichardsson on Wednesday October 05, 2022 @08:17AM (#33094428)
> finding suspects after the fact

Sounds like you think law enforcement actually give a shit about/can do anything toward solving burglary crime.

Maybe it's better in other countries, but 5% solve rate sounds like they go and knock on the doors of the local known burglars to see if they still got the goods lying around.

https://www.theguardian.com/uk-news/2018/jun/17/figures-less...

Re:How criminals are using jammers, deauthers to disrupt WiF... by donkeyd on Wednesday October 05, 2022 @11:19AM (#33096685)
I actually work in LE and video from domestic and commercial security cameras are always a major piece of information that we look for in every single investigation. So... Yes, LE gives a shit in many countries.

However, also in many countries, like my own, police is very under staffed and burglaries are often on the bottom of the priorities list. Armed robberies, murders, shootings, stabbings, explosions, fires, domestic abuse, rape, to name a few, are the ones that get the highest priority. And those things take a lot of work to find suspects, prove what they're suspected of, write it down and get them convicted.

A case, unfortunately, isn't finished when you catch a suspect. It's a crap load of work to get someone convicted and that gets massively underestimated by people who only read statistics and conclude that LE doesn't care... Most of us do, which is why we join the field.

Re:How criminals are using jammers, deauthers to disrupt WiF... by dk775 on Thursday October 06, 2022 @12:32AM (#33104408)
Same, used to work for one of the largest depts in the us, the part 1 crimes that are violent really take up the mindshare in a violent city. Cameras only tell so much, the flyers go out with what is found. Lots of people don’t snitch either. We are relying a lot more on technology not just registries of voluntary ring locations but LPRs etc. I think the goal is to get around no snitching.
Re:How criminals are using jammers, deauthers to disrupt WiF... by closeparen on Wednesday October 05, 2022 @07:50AM (#33094178)
Someone sophisticated enough to run a deauth attack is sophisticated enough to grab the memory card out of the camera.
Re:How criminals are using jammers, deauthers to disrupt WiF... by donkeyd on Wednesday October 05, 2022 @11:23AM (#33096746)
Sophisticated criminals don't bring ladders to climb in order to fiddle with SD card slots. They want easy in and easy out.

And they usually wear masks, so the video you do record are useless anyway.

Re:How criminals are using jammers, deauthers to disrupt WiF... by joshjje on Wednesday October 05, 2022 @08:08AM (#33094341)
Put a very small/hidden backup camera somewhere, so they take out the main one and think they're all good.
Re:How criminals are using jammers, deauthers to disrupt WiF... by leoh on Wednesday October 05, 2022 @01:42AM (#33091721)
Certainly there are protocols that require authentication over ethernet like https://en.wikipedia.org/wiki/IEEE_802.1X
Re:How criminals are using jammers, deauthers to disrupt WiF... by yCloser on Wednesday October 05, 2022 @03:04AM (#33092195)
or simply set up another vlan for the cameras (and this does not require any configuration on the cameras, just on the switch)
Re:How criminals are using jammers, deauthers to disrupt WiF... by autoexec on Wednesday October 05, 2022 @04:34AM (#33092815)
Why not a physically separate network? If all you care about is catching outside problems like porch pirates, car thieves, and dogs owners who don't clean up after their pets just run cables from each camera to a switch that's connected to a single machine that isn't on your network or the internet.

Cameras inside the house get internet access, so intruders can't just walk off with your footage, but external camera feeds are fine to be stored locally.

That'd take very little skill to set up, prevents anyone from using those external connections to get at the rest of your network or abuse your internet connection,you don't have to worry about jammers, the police won't be accessing your feed whenever they feel like it, and Amazon won't be keeping detailed logs of everyone who comes to your door, how often you have company over, what your daily/weekly schedule is like, how often you get food delivered, what kinds of clothing you and your guests are wearing, how many children are in your home, how many pets, how often you go out on the weekends vs staying inside, how often you vacation and for how long, how many friends you have, how often you have non-amazon packages delivered, what kind of car you drive, etc

Re:How criminals are using jammers, deauthers to disrupt WiF... by bluedino on Wednesday October 05, 2022 @12:41PM (#33097823)
Put enough voltage through the line and you'll destroy the switch, ethernet cables, and possibly other network devices that are connected.
Re:How criminals are using jammers, deauthers to disrupt WiF... by autoexec on Wednesday October 05, 2022 @02:46PM (#33099654)
Pour gasoline over the cameras, then light it, and you can burn the whole house down destroying the footage and killing everyone inside!

You can't build a system that's immune to every possible type of attack, but fortunately you don't have to. Most people will never catch a single "bad guy" with their camera set up, and will never have anyone mess with the system at all. That doesn't mean it's not a good idea to take a few simple steps to better protect yourself, your family, your packages, your network and your privacy. If you see value in having your surroundings captured on camera you can gain a lot of benefits for a small amount of effort by throwing your ring cameras in the trash and setting up a dedicated network for their replacements.

Re:How criminals are using jammers, deauthers to disrupt WiF... by bsenftner on Wednesday October 05, 2022 @07:18AM (#33093916)
This is the way to go. Any other way is just lazy.
Re:How criminals are using jammers, deauthers to disrupt WiF... by ryandrake on Wednesday October 05, 2022 @11:21AM (#33096703)
I take the lazy VLAN route, then. Ideally, I can plan all this out during construction, and run conduit through all walls, have electrical outlets near each ideal switch location, and so on. But in most homes that are not previously owned by tech-geeks, re-wiring properly means busting down drywall. If you own the home, it's a major pain, and if you rent, it's impossible.

Typically the things on my home network that need to be isolated and/or revoked Internet access are not in physical proximity with one another, so using a separate switch for them means a lot more wiring. It is much simpler to just run devices to the nearest already existing switch and do the isolation in software. This also cuts down on the number of switches which means fewer points of failure.

Re:How criminals are using jammers, deauthers to disrupt WiF... by autoexec on Wednesday October 05, 2022 @03:04PM (#33099895)
Because we've already got the skills to secure a shared network I don't blame you. On the other hand though there's some benefit to redundancy too. if your switch dies it'd be nice to be able to take the cameras offline and swap in the working switch so your internet stays up while you wait for the new one to arrive.

For the crowd who can't isolate the cameras from the rest of their network and don't already have a bunch of networking equipment laying around though a dedicated network for the security cams is a easy solution that offers a lot of advantages over a ring cam.

Re:How criminals are using jammers, deauthers to disrupt WiF... by chinathrow on Wednesday October 05, 2022 @03:20AM (#33092311)
That's what OP did and said:

"... but I think that's outside the relm of what most consumers can do."

Re:How criminals are using jammers, deauthers to disrupt WiF... by _flux on Wednesday October 05, 2022 @02:28AM (#33091992)
But how many cameras support them?
Re:How criminals are using jammers, deauthers to disrupt WiF... by stonepresto on Wednesday October 05, 2022 @07:53AM (#33094194)
I don't think that prevents MAC spoofing
Re:How criminals are using jammers, deauthers to disrupt WiF... by nikau on Wednesday October 05, 2022 @04:15AM (#33092697)
Worth noting even the cheapest router chipsets normally support vlan tagging, so with a sub $100 router you can flash an opensource firmware on it like openwrt and then isolate network traffic on each port and filter it with iptables.
Re:How criminals are using jammers, deauthers to disrupt WiF... by dk775 on Thursday October 06, 2022 @12:34AM (#33104415)
Can you provide an easy guide for net gear Vlan? I am pretty good w computers but some reason can never figure out how to set up
Re:How criminals are using jammers, deauthers to disrupt WiF... by nikau on Thursday October 06, 2022 @10:02AM (#33108255)
Not sure how easy it is, but its documented pretty thoroughly on the openwrt dooco:

https://openwrt.org/docs/guide-user/network/vlan/switch_conf...

Re:How criminals are using jammers, deauthers to disrupt WiF... by Gigachad on Wednesday October 05, 2022 @02:03AM (#33091848)
What use is getting access to the network these day anyway? Everything has moved to a model of not trusting the network or anything else on it. I guess they could cast something to your chrome cast?
Re:How criminals are using jammers, deauthers to disrupt WiF... by gorgoiler on Wednesday October 05, 2022 @03:19AM (#33092300)
The attack I worry about is neighbourhood teenagers using my internet connection for lolz.

I imagine them downloading movies and images that get me into trouble with the wife / LEAs / both.

Re:How criminals are using jammers, deauthers to disrupt WiF... by sebzim4500 on Wednesday October 05, 2022 @06:52AM (#33093737)
How is your wife going to find out what has been downloaded over your network?
Re:How criminals are using jammers, deauthers to disrupt WiF... by iinnPP on Wednesday October 05, 2022 @07:41AM (#33094095)
knock knock knock

I'm Dick with the FBI. Is your husband home?

Re:How criminals are using jammers, deauthers to disrupt WiF... by gorgoiler on Wednesday October 05, 2022 @03:25PM (#33100171)
Yes you are both right to correct me.

I will get in trouble with my wife because the feds will rat me out to her for something stupid these hypothetical kids end up doing.

Re:How criminals are using jammers, deauthers to disrupt WiF... by feanaro on Wednesday October 05, 2022 @03:00AM (#33092176)
Are you sure everything has? Smart appliances in particular are typically terrible with security, so having access to their network certainly gives you an edge.
Re:How criminals are using jammers, deauthers to disrupt WiF... by sydd on Wednesday October 05, 2022 @03:08AM (#33092217)
So what would a robber do with them? Turn off your refrigerator? Cancel your scheduled washing program? Install some malware?

Usually it's meth heads trying to steal something that is easy to grab not the CIA.

Re:How criminals are using jammers, deauthers to disrupt WiF... by jhoelzel on Wednesday October 05, 2022 @03:25AM (#33092330)
pffff a lot of routers dont even come with ssl on by default. So yeah getting into your network is a big thing. =)
Re:How criminals are using jammers, deauthers to disrupt WiF... by jhoelzel on Thursday October 06, 2022 @08:53AM (#33107613)
Guys I mean it, i just bought a brand new fiber router (AVM fritz.box) and the first thing firefox would like me to do is to switch to the http version of said configuration page.

Chrome lets me add an exception for the box itself, but really how many end user do you know that will not click on "take me to the http version(unsafe)", when talking about their home router?

So given the fact that I am in your wifi, One could use dhcp (if active) for MITM attacks, grab the router password and install tracking daemons right on top.

Next step would be to forward the dns requests to one of mine so I can build a map of what sites you use and from there all I have to to is to make you accept an insecure ssl cert and done?

Re:How criminals are using jammers, deauthers to disrupt WiF... by rlpb on Wednesday October 05, 2022 @09:02AM (#33095006)
> I went with building an isolated network, but I think that's outside the relm of what most consumers can do.

An off-the-shelf consumer PVR that uses wired ethernet typically has its own integrated PoE switch on its own subnet. Maybe it will route to your LAN if you probe the private ranges, but it's also a fairly straightforward software issue to fix - nothing fundamental to the arrangement, and at no additional marginal cost.

Re:How criminals are using jammers, deauthers to disrupt WiF... by aarobot on Wednesday October 05, 2022 @02:43AM (#33092080)
Aren't wired cameras fine as long as you use a virtual LAN network for them and don't place them inside?
Re:How criminals are using jammers, deauthers to disrupt WiF... by arminiusreturns on Wednesday October 05, 2022 @08:44AM (#33094746)
I suggest a physically separate network for ip based security systems. The GPs concerns are also why most wired CCTV at the higher end is often not ethernet, but there are ways to secure ethernet even externally (camera housings that are basically safes, very high placement that would require a ladder to get to, etc)
Re:How criminals are using jammers, deauthers to disrupt WiF... by walterbell on Wednesday October 05, 2022 @10:25AM (#33095968)
What's a good search term for makers/retailers of "camera housings that are basically safes"?
Re:How criminals are using jammers, deauthers to disrupt WiF... by arminiusreturns on Wednesday October 05, 2022 @11:58AM (#33097205)
The term you are looking for is "high-security", which covers the private industry side, DoD has others at play. Also dont forget the value of having custom welding done.
Re:How criminals are using jammers, deauthers to disrupt WiF... by walterbell on Wednesday October 05, 2022 @12:03PM (#33097278)
Thanks, my initial search found cameras for oil rigs, which minimized sparks :) I've used carriage bolts to reinforce steel enclosures, with single-use wire rope seals for tamper detection on covers, minimizing exposure of the clamping point.

Axis P1204 has a small camera sensor separated from the camera body by a 25' cable, which makes it easier to enclose and secure the camera body. Not seen that elsewhere, must be a proprietary protocol on that cable, e.g. RPi camera sensor cables can only be a few cm.

Re:How criminals are using jammers, deauthers to disrupt WiF... by jhoelzel on Thursday October 06, 2022 @08:59AM (#33107661)
i just bought a reolink RLC-823A Smart 8MP PTZ PoE Camera with Spotlights

It is build like a tank and fully aluminium. If you mount it right you easily can hold a person from it. I bascially made a hole through the wall for the cables and mounted it directly to the outside wall.

For now im quite confident that nobody will be able to remove it without much fuzz

Re:How criminals are using jammers, deauthers to disrupt WiF... by jmuguy on Wednesday October 05, 2022 @09:32AM (#33095347)
Wouldn't you, ya know, see a baddie disconnecting/destroying your camera and connecting their CP downloading device or whatever they're planning to do on your network?
Re:How criminals are using jammers, deauthers to disrupt WiF... by varispeed on Wednesday October 05, 2022 @04:11AM (#33092673)
I had WiFi cameras until my friend showed me how his cameras were jammed when his neighbour had a broad daylight burglary. A van pulled up and a second later the video was completely jammed. Then five minutes later it comes back to normal, but neighbour doors were smashed in.

So I got a wired network now, on a separate LAN and have two cameras on each perimeter, so if someone tries to cut the cable (unfortunately I was unable to run the cables inside the wall, so they run in PVC pipes attached to the wall), I very least should have that recorded. Also all my cameras are 4k. The cameras also record to built in SD card. There are also two servers hidden each is pulling the videos from DVR to back up and then one copy is uploaded to external server.

Re:How criminals are using jammers, deauthers to disrupt WiF... by hutzlibu on Wednesday October 05, 2022 @03:27AM (#33092347)
"She had gotten into two other houses that night. She was also tripped out on meth and couldn't have operated a WiFi jammer if she wanted to."

You left out the dramatic details. So you stopped and confronted her directly yourself, or called the police who caught her(later)?

(In general, it is not advisable to confront meth addicts, they might be armed and not restrained in any way.)

Re:How criminals are using jammers, deauthers to disrupt WiF... by feanaro on Wednesday October 05, 2022 @02:57AM (#33092160)
> I went with building an isolated network, but I think that's outside the relm of what most consumers can do.

A bit off topic, but can we please stop calling people "consumers"? It's such a weird and patronising term, not to mention completely unnecessary when "people" does a better job.

Re:How criminals are using jammers, deauthers to disrupt WiF... by x-complexity on Wednesday October 05, 2022 @03:29AM (#33092364)
> can we please stop calling people "consumers"? It's such a weird and patronising term, not to mention completely unnecessary when "people" does a better job.

"Consumer" IS the technically more accurate term, as outside of the consumption of tech/services as designed for them, they do not venture beyond that realm & try to understand how the tech works.

Similar analogies include:

- Not caring about how a car works internally, & leaving its repair & maintenance to a mechanic.

- Not caring about how their dishes were made, & leaving that to cooks/chefs.

- Not caring about the minutiae of the law, & leaving that to the legal system & its lawyers & judges.

- Not caring about sewer maintenance, & leaving that for sewage workers.

- Not caring about recyclables processing, & leaving that for recycling plants.

- Not caring about Y, and leaving that for (workers/entities that work with Y).

All of us are consumers in some form or another: We require the services of others that require the services of others that require the services of others ad infinitum.

Re:How criminals are using jammers, deauthers to disrupt WiF... by mafuy on Wednesday October 05, 2022 @09:15AM (#33095151)
I'll go ahead and say I mostly agree. I don't like being called some kind of sink, evaporator, diminisher or resource-terminator. Though granted, in English, these connotations are not as prevalent as in my language.

In my language, employers are routinely called "work-givers", employees are "work-takers", even though we have a perfectly fine "employee" term. I hate how it introduces a power relationship into the terms themselves.

But I also know it's a lost fight. I once specifically used the neutral term for employee in a work contract I wrote - which was best practice just a few decades ago. It was immediately changed.

Re:How criminals are using jammers, deauthers to disrupt WiF... by Out_of_Characte on Wednesday October 05, 2022 @03:29AM (#33092369)
I think consumer/customer is the right term in this situation. Even though I could build an isolated network with ethernet cables and security camera's, we're usually left with the other people, myself included, that wouldn't always be able to do research and come up with the best solution. That's why I want to outsource that by purchasing something. Which is why we're left with this freemarket of vulnerable devices and practises. People setting up security camera's usually do a good job. Consumers do not.
Re:How criminals are using jammers, deauthers to disrupt WiF... by NavinF on Wednesday October 05, 2022 @03:24AM (#33092326)
It's an accurate term. "Consumer" as opposed to prosumer, enthusiast, and professional.
Re:How criminals are using jammers, deauthers to disrupt WiF... by tomcam on Wednesday October 05, 2022 @03:15AM (#33092260)
I would wager most of us consumers don’t care
Re:How criminals are using jammers, deauthers to disrupt WiF... by omegalulw on Wednesday October 05, 2022 @06:41AM (#33093653)
I think you can encrypt ethernet comms too using 802.1x RADIUS. That's as secure as Wi-Fi and removes the need for an isolated network (which, when unencrypted isn't as secure as you think, e.g. MiTM). Ideally you connect via both but that's overkill for most use cases.
Re:How criminals are using jammers, deauthers to disrupt WiF... by da768 on Wednesday October 05, 2022 @07:00AM (#33093801)
802.1x only authenticates devices, there's no encryption whatsoever past that point. You'd need MACsec or a VPN connection to prevent tapping.