Defcon 20 - Dan Tentler - Drinking from the caffeine firehose we know as shodan
vissago3 HN recommenders · recommended in 3 months, 2014–2019
talk · intermediate · 2014–2019 on HN
Dan Tentler's DEF CON 20 talk on odd things he found on the internet through Shodan, such as stoplights, power systems and other non-computer devices exposed online. It highlights how many devices need no credentials.
HN points to it when discussing exposed IoT and industrial devices, as an eye-opening look at how much is reachable online.
Up next
3 mo on HNGender Neutral Pronouns: They're Here, Get Used To Them
Tom Scott
3 HN recommender · 2013–2015
6 mo on HNBlueHat IL 2019 - Andrew "bunnie" Huang - Supply Chain Security: "If I were a Nation State...”
Microsoft Israel R&D Center
6 HN recommender · 2019–2024
15 mo on HNBut what is the Fourier Transform? A visual introduction.
3Blue1Brown
16 HN recommender · 2018–2025
6 mo on HNCybersecurity as Realpolitik by Dan Geer presented at Black Hat USA 2014
Black Hat
1 HN recommend · 2014–2023
4 mo on HNMark Blyth ─ Global Trumpism
Watson School of International and Public Affairs
3 HN recommender · 2016–2019
3 mo on HNChernobyl 3828
TeleconStudio
2 HN recommender · 2014–2019
4 mo on HNFlat Earth: A Measured Response
hbomberguy
3 HN recommender · 2019–2024
3 mo on HNTasBlock at AGDQ 2017: TASBot
TASVideosChannel
3 HN recommender · 2019–2025
11 mo on HNBehind the Scenes of iOS Security
Black Hat
9 HN recommender · 2016–2026
11 mo on HNWhy Electronic Voting Is Still A Bad Idea
Tom Scott
11 HN recommender · 2020–2026
10 mo on HNUSENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
USENIX
10 HN recommender · 2018–2026
10 mo on HNDefcon 18 Changing threats to privacy Moxie Marlinspike Part
killab66661
6 HN recommender · 2012–2019
5 comments from Hacker News
The answer is: quite probably. A lot of old systems get retrofitted with additional features/terminals/addons on top to make them "more modern" and as a result end up being connected to the internet. A great presentation on this (and many other things) here: ▶ this video
Defcon 20 - Dan Tentler - "Drinking from the caffeine firehose we know as shodan" ▶ this video Warning - watching this may readjust your faith in humanity. Telnet is just the tip of the iceberg. edit: (15:42) "Econolite [stoplights] listening on telnet. There are intersections [with] stoplights; you can telnet into them and put them in 'test mode'[sic], and the warning says, 'Don't do this, you could kill people!'"
It's both amazing and scary that this kind of vulnerability is fairly common. Check out this great talk given at Defcon ( ▶ this video ) to get an idea of the magnitude. These are systems that do not require any kind of tampering or credentials. Most times credentials are given to you in a prompt!
> Doorbell cameras aren't compelling targets for hackers They will be when people discover creative new ways to abuse them, but it doesn't even needs to be a "compelling target". Some people simply think browsing cameras on the internet is fun. ▶ this video
It's much worse than just passive webcams. Some devices which were never meant to be connected to the internet are out there. Stoplights? HVAC Systems? Carwashes? Ice Rinks? POWER PLANTS? Yes! ▶ this video EDIT: I looked at his more recent talk from last November ... the situation has not improved "115 batshit stupid things you can put on the internet in as fast as I can go by Dan Tentler" link Featuring Spanish Chicken Controls