In case you’ve ever wondered, “why don’t I ever run into those Hack a Day scamps at the Panera?” It’s because SonicWALL thinks we’re a “Hacking/Proxy Avoidance Systems” and the more inexplicable “Usenet News Groups.” We’ve gotten many reports from readers over the years about getting blocked by various vendors’ proxies. Do you have any trouble viewing Hack a Day from your school/work? What “service” are they using? We use ssh’s application level dynamic port forwarding to get around most systems when we’re on the road.
Security Hacks1567 Articles
XB Browser For Anonymous Browsing
Download Squad highlighted the xB Browser today. It’s a product offered by XeroBank and is the successor to the TorPark project. The browser anonymizes your browsing using the Tor network and doesn’t remember passwords, sites visited, or any other personal information. Scripts and plugins are disallowed by default, since they could be used to identify you. Remember that Tor just anonymizes; you’re still at the mercy of the exit nodes when it comes to security.
That’s just the free version though. Subscribers to XeroBank have access to an anonymous mail server and VPN service. If you’re a subscriber your bowser session is tunneled through XeroBank’s pool of servers and not the Tor network. We think they should have maintained a separate product name since this distinction isn’t clear outside of the FAQ.
Ring Of The Devil Electric Lock Exploit
[Barry] got his hands on an interesting electronic lock pick. The ‘Ring of the Devil’ is made of aluminum and has four magnets inside. By rotating it against an electric lock, (like the one in our RGB keypad lock How-To) the magnetic force can cause the electric motor inside the lock to turn and unlock. More details and commentary are on [Barry]’s site.
Geocamming — Unsecurity Cameras Revisited
this one is for all the people who couldn’t see the netcams from sunday’s post. it turns out that the web interface to these cameras can serve both motion-jpeg and traditional jpeg frames (the latter with browser refresh). unfortunately, many browsers (including safari on my machine) don’t appear to handle motion-jpeg.
no need to switch browsers, though. you can use google to filter out the motion-jpeg urls. you’ll even benefit by reducing the amount of bandwidth you use (really nice for the slow camera connections). just google for inurl:”ViewerFrame?Mode=Refresh”
there’s something incredibly cool about seeing what is happening around the world. you can change the interface language to english by setting the language id to 4 in the url.
the cameras i’ve seen all have an image capture feature (brown link on the bottom left of the interface). you can take snapshots of what’s currently going on, or view captures that other people have taken with the camera. i wouldn’t be surprised if people start making a sport of this.
these all appear to be panasonic network cameras, by the way. in all fairness, they work quite well and they aren’t the first device to fall victim to people who don’t set passwords. here are some other nice geocamming start points.
axis cameras: jpeg, motion-jpeg, with interface and canon too.
Continue reading “Geocamming — Unsecurity Cameras Revisited”
Google For Unsecured Security Cameras
some untrusting person’s employee. the lobby of a radio station in taiwan. a woman shaving a cat. sleeping mice inside of a research lab – who knows what you’ll find with a quick search. as this becomes more well known, there is a good chance you’ll find yourself wrestling another snooper for control of a camera
Better Usb Wireless Security
there’s a pretty slick device called the “thanko usb pc lock” that will unlock and lock your pc based on how close your are to it (physically).
the only downside is the software that comes with seems a bit wonky, but–bryan batchelder rolled up a better version which to address all the complaints we had, the future features look pretty sweet too.
