The Proliferation of Security Cameras

There are a multitude of security cameras available to buy today. I have the Ring doorbell and a Ring floodlight/camera system over my garage door. The problem with the proliferation of this technology is that not every solution comes with easy-to-use software that is secure. In fact, many of those cameras come with either a default factory username/password or no password at all.

The site Insecam is the largest directory of online security cameras that have not been secured. The site host has removed (apparently) cameras from people’s homes so as not to invade people’s privacy. It’s a site that supposedly exists to educate people on the importance of securing their technology. There have been many news reports over the years regarding this problem, but it’s a lesson that people still seem to learn the hard way.

There is a website called "shodan.io” that is like google search, but for things instead of sites. It’s used by penetration testers to find webcams, industrial control systems, and databases. It’s a bit techie to use, but with some persistence (and by opening an account) you can find some neat things.

While it’s obvious that people hacking the camera over your garage is dangerous because crooks can tell if you’ve left your home or you’re away on vacation. What about other devices, though? I also have a Nest thermostat. While you might not think that it would present much of a security risk, the thermostat has a sensor that detects movement. In fact, the algorithms rely on your patters of movement over time to decide if it should lower the temperature if no one is home for an extended period and it thinks you’re on vacation. If a hacker accessed the device, they would be able to monitor that sensor and establish if you’re not home.

The important lesson here is that any device that you connect to your wifi network should be password protected. Whether that’s a camera, a wifi printer, or your thermostat. All of them reveal information about you.