Linksys IP cam hacking

admin_password_extraction_2-300x216

GNUCITIZEN has posted information on linksys wireless IP camera hacking. It turns out that some models send the administrator user name and password to the computer when the setup wizard requests a connection. In theory, someone could send the request and harvest your passwords wirelessly. This seems like a pretty careless oversight. We would think that linksys will probably remedy this before too long.

Update: Part 2 has been posted.

Update: Part 3 has been posted.

Comments [19]

tagged: camera, linksys, wireless

Reader Comments

Fail. Good job Linksys.

Posted at 12:53 pm on Apr 20th, 2009 by Clay

There’s no way this was accidental. You don’t send uname/pwd unencrypted over a network. This is nothing more than laziness on the developers part, knowing that they’re working on a “consumer” product.

Is there a way to shut off the response to this wizard?

Posted at 12:56 pm on Apr 20th, 2009 by will2

Someone will come out with an aftermarket firmware for them like DD-Wrt. It’s tops. I run it on all my equipment. Even at work I talked our I.T. guys into using it.

Posted at 1:06 pm on Apr 20th, 2009 by Clay

one word: fail

Posted at 1:15 pm on Apr 20th, 2009 by adam

And that update will only help people who are security minded enough to look for and install updates.

Posted at 1:33 pm on Apr 20th, 2009 by cde

Well his initial fear wasn’t based on logic – the camera could have been simply sending the password hash. Not a very good idea, but not inherently insecure.

Of course if the wizard has the password in memory before you’ve even entered it then that’s another matter!

Posted at 1:49 pm on Apr 20th, 2009 by Tim

In my experience, it takes a higher-caliber programmer to think security. Coders (that I’ve worked with) *generally* don’t have security on the top of their list of things to be concerned with – to them, as long as the application works it’s golden. That’s why guys like me still have a job ;)

Posted at 3:08 pm on Apr 20th, 2009 by Daley

@Clay

I used to have one, they suck anyway. I think the dd-wrt guys looked into it and there’s just not enough openness in the hardware to get it to work.

Posted at 3:36 pm on Apr 20th, 2009 by barry99705

Oh my lord. We have these at college. LOL

Posted at 4:12 pm on Apr 20th, 2009 by Marine

The developers probably just ‘got it working’ for a deadline and didn’t get the time, or forgot about the security part by the end.

Posted at 4:35 pm on Apr 20th, 2009 by Peter

I actually have Linksys wireless at home, i heard they are safe, but i am kind of being cautious now.

Posted at 10:07 pm on Apr 20th, 2009 by Jacky

Used to be if your neighbor was a perv he had to break into your house to plant a camera, Now all he needs is some minor hacking skills.

Posted at 8:21 am on Apr 21st, 2009 by Clay

This reminds me of the first version of windows 2000, where you could easily and remotely access a person’s user information via the reedit.

Posted at 2:03 pm on Apr 21st, 2009 by blizzarddemon

I have this camera and it is not a very solid linksys product. The motion detection can only be fine tuned using Active X with IE.

Also there is no way to turn off the auto light adjustment, so it gives about 20 false positives for motion detection in a day (if it’s in a room that allows any sunlight)

Posted at 3:24 pm on Apr 21st, 2009 by el_walto

i was only laughing at hollywood the other day as well… but they were switching between just about everybodys… and for some reason they all had controllable directioning as well!

life >= art ? /s

Posted at 6:12 am on Apr 22nd, 2009 by eMpTy

hackers (good/bad) look for stuff like this. The bad guys love glitches and use to advantage. This most certainly will be exploitable by the moderate or maybe some inexperirnced hackers.

At least it’s not a cell with a broadcasting bluetooth that sends out a hashed SS #.

Posted at 3:41 am on Apr 28th, 2009 by joe

thanks admin

Posted at 9:06 pm on May 24th, 2009 by türk gizli çekim

sex

Posted at 5:49 am on Jun 28th, 2009 by Azgin

sex

Posted at 5:51 am on Jun 28th, 2009 by Sikiş Videoları