Google Exposes Web Surveillance Cams 453
An anonymous reader writes "Blogs and message forums buzzed this week with the discovery that a pair of simple Google searches permits access to well over 1,000 unprotected surveillance cameras around the world - apparently without their owners' knowledge." Apparently many of the cams are even aimable. Oops!
Re:The question is (Score:5, Informative)
The URL I use (Score:3, Informative)
a search string for the lazy/stupid among us (Score:3, Informative)
some cameras (Score:4, Informative)
http://sindominio.net/suburbia/article.php3?id_ar
The best ones so far (Score:5, Informative)
This one seems to show every page printed off of some printer. http://81.72.76.218/view/index.shtml [81.72.76.218]. Right now it's some photo.
This one http://217.148.2.106/view/index.shtml [217.148.2.106] shows somes bar (German?) that seems very active.
This one http://24.173.235.172:8001/axis-cgi/mjpg/video.cg
Anybody find any other cool ones?
Re:Run your own surveillance (Score:3, Informative)
The search queries are... (Score:3, Informative)
inurl:"ViewerFrame?Mode=" [google.com]
or:
inurl:"MultiCameraFrame?Mode=" [google.com]
interesting (Score:5, Informative)
change language=1 to language=0 to get english text.
detailed links (Score:4, Informative)
You can do slightly bettter by searching for inurl:"MultiCameraFrame?Mode=" [google.com], as mentioned on Metafilter [metafilter.com].
Root Password (Score:2, Informative)
http://cert.uni-stuttgart.de/archive/bugtraq/2001
Re:detailed links (Score:2, Informative)
Tracker Cam's use this in their urls. These cam's are they type that can be move around and seem to be one of the favs for "in the bedroom" used cam's.
Google Links to Web cams (Score:5, Informative)
Google - inurl:"ViewerFrame?Mode=Motion" [google.com]
Google - inurl:LvAppl intitle:liveapplet [google.com]
Google - intitle:"Live View / - AXIS" [google.com]
Google - "Powered by webcamXP" [google.com]
Google - inurl:indexFrame.shtml "Axis Video Server" [google.com]
Google - "MOBOTIX M1" and "open menu" [google.com]
Google - intitle:flexwatch intext:"Copyright by Seyeon TECH Co" [google.com]
Google - intitle:"WJ-NT104 Main" [google.com]
Re:The question is (Score:5, Informative)
Re:Security vs. Stupidity (Score:4, Informative)
Re:Simple solution-THAT FAILS (Score:3, Informative)
further, if security is the issue, there are indexes that IGNORE robots.txt file, (and I'm sure there are some that actively look for robots.txt that are exclusionary) not everyone lives by the motto "do no evil"
a spider reading the robots.txt is a nice, perfect world, internet convention, much like SMTP- and we all know how well that ended up.
A fresh batch (Score:1, Informative)
Type this into Google:
"toshiba network camera" login
This is not new (Score:1, Informative)
These are various samples:
Convision-> inurl:"/fullsize.jpg?camera="
Axis-> inurl:"/axis-cgi/jpg/image.cgi"
Canon -> inurl:"/-wvhttp-01-/GetOneShot"
Pixord -> inurl:"/images<camera_id>sif"
Panasonic -> inurl:"/SnapshotJPEG?Resolution=320x240&Quality=M
D-Link -> inurl:"/IMAGE.JPG"
JVC -> inurl:"/still.jpg"
IQinVision (Video-Server) -> inurl:"/cgi-bin/cgi-image?camid="
IQinVision (Camera) -> inurl:"/now.jpg"
Re:The best ones so far (Score:1, Informative)
Re:The best ones so far (Score:1, Informative)
http://24.234.255.102/axis-cgi/mjpg/video.cgi?c
It's a panning camera - I just kept hitting reload.
Re:robots.txt not obvious (Score:3, Informative)
Opera (the unregistered version with the ads) also uses Google to provide advertising, so anybody who browses to your site using Opera will make Google aware of your site. I had a page on my website that was linked to only from my IM profile, and I was looking through the logs and noticed someone use Opera to view my site, followed one second later by a bunch of hits from Google (probably trying to figure out what sort of ad to show.) Not linking to a page doesn't keep it secret in today's world - you need a password, period.
Re:The best ones so far (Score:2, Informative)
Re:The question is (Score:5, Informative)
Re:But why were they crawled? (Score:3, Informative)
But, as the parent said, it will never find a site _unless_ there is a link to it.
Google does not just make up URLs and domains and try brute-forcing them, it follows links on already known-of pages. Therefore we can assume that somewhere, someone has linked to these cameras. Linking to your webcam on the internet kind of implies that it is open to the public, does it not?
ND
Re:Google Links to Web cams (Score:3, Informative)
No, it doesn't - if you use homeJ.html links, there is a Java viewer that works on all platforms. Like in this search [google.com]. Some of them have even working controls, although most show boring construction sites.
Re:Speaking of IP cam, why isn't there higher res. (Score:3, Informative)
Next, the phillips TriMedia chip and competitors support real-time compression at 640x480 and are available in volume. Chips that can suport compression at higher resolutions aren't made in volume, so are much more expensive.
Finally, if you need high resolution, just switch to a telephoto lens. If you need to look at several areas of detail, use several cameras.
Re:The best ones so far (Score:2, Informative)
http://www.abia.org/c2g/curb2gate.htm