Defcon 20 - Dan Tentler - Drinking from the caffeine firehose we know as shodan

It's both amazing and scary that this kind of vulnerability is fairly common. Check out this great talk given at Defcon ( [VIDEO] ) to get an idea of the magnitude. These are systems that do not require any kind of tampering or credentials. Most times credentials are given to you in a prompt!

Defcon 20 - Dan Tentler - "Drinking from the caffeine firehose we know as shodan" [VIDEO] Warning - watching this may readjust your faith in humanity. Telnet is just the tip of the iceberg. edit: (15:42) "Econolite [stoplights] listening on telnet. There are intersections [with] stoplights; you can telnet into them and put them in 'test mode'[sic], and the warning says, 'Don't do this, you could kill people!'"

The answer is: quite probably. A lot of old systems get retrofitted with additional features/terminals/addons on top to make them "more modern" and as a result end up being connected to the internet. A great presentation on this (and many other things) here: [VIDEO]

It's much worse than just passive webcams. Some devices which were never meant to be connected to the internet are out there. Stoplights? HVAC Systems? Carwashes? Ice Rinks? POWER PLANTS? Yes! [VIDEO] EDIT: I looked at his more recent talk from last November ... the situation has not improved "115 batshit stupid things you can put on the internet in as fast as I can go by Dan Tentler" [LINK] Featuring Spanish Chicken Controls

> Doorbell cameras aren't compelling targets for hackers They will be when people discover creative new ways to abuse them, but it doesn't even needs to be a "compelling target". Some people simply think browsing cameras on the internet is fun. [VIDEO]