News for hackers. Stuff that matters.

A comment on Child pornography on sale from hacked Hikvision cameras using Hik-Connect app. Parent comment

Re:Child pornography on sale from hacked Hikvision cameras u... by formerly_proven on Saturday July 15, 2023 @11:04AM (#36737451)
> If you have this in your home disable outgoing connections at router level, and you're safe.

This is bad advice and people should stop posting it. An IP or MAC based rule does not prevent a malicious device from exfiltrating data and neither does it protect a vulnerable device from other devices in the network.

IP cameras must be installed with a separate broadcast domain. Be that a separate switch or a port-based VLAN. The only connection if any should be through the trusted NVR/VMS.

[ Parent | on HN ]
Re:Child pornography on sale from hacked Hikvision cameras u... by shudza on Monday July 17, 2023 @05:11AM (#36755774)
> An IP or MAC based rule does not prevent a malicious device from exfiltrating data

Care to elaborate?

[ Parent | on HN ]
Re:Child pornography on sale from hacked Hikvision cameras u... by formerly_proven on Monday July 17, 2023 @07:16AM (#36756590)
Who is filling those header fields in? The malicious device.
[ Parent | on HN ]