Couples Nest Security Hacked

[WrCombs]

just came across this article:

https://www.ketv.com/article/my-blood-ran-cold-couple-says-they-were-watched-threatened-through-smart-security-cameras/26102165

Not local to me, but to some people here I'm sure.

How do you feel about this?

[murpheous]

They weren't "hacked"

[WrCombs]

@murpheous said in Couples Nest Security Hacked:

They weren't "hacked"

Someone gained remote access to their security systems and camera's is that not definition of " hacked"

Hack: To use a computer to gain unauthorized access to data in a system.

[coliver]

Arjun Sud is now aware that using complex passwords and adding two-factor authentication can reduce security risks, but had not known about the option before.

I'll just leave this here.

[WrCombs]

@coliver I saw that too ; I didnt say it wasnt "their fault"

[scottalanmiller]

@murpheous said in Couples Nest Security Hacked:

They weren't "hacked"

They were, but they were idiots who invited being "hacked". It's just a simple guessing of their passwords. Nest is at no fault here, the end users are completely at fault. Nothing to be afraid of. Stupid people are stupid people.

[WrCombs]

@scottalanmiller said in Couples Nest Security Hacked:

@murpheous said in Couples Nest Security Hacked:

They weren't "hacked"

They were, but they were idiots who invited being "hacked". It's just a simple guessing of their passwords. Nest is at no fault here, the end users are completely at fault. Nothing to be afraid of. Stupid people are stupid people.

it wasnt an impressive hack, that's for sure.

As for Nest not being at fault here, I would agree that they aren't at fault.
If you use a basic password/ no 2fa and do nothing to protect your equipment Its your own damn fault.
Thought it was funny and good point because I know a few people the I could see this happening too, cause they don't listen.

[DustinB3403]

Technically speaking the person who "hacked" into this system can still be brought up on charges of "hacking". Regardless of the insecure passwords and failure to use 2FA.

[WrCombs]

@DustinB3403 said in Couples Nest Security Hacked:

Technically speaking the person who "hacked" into this system can still be brought up on charges of "hacking". Regardless of the insecure passwords and failure to use 2FA.

Im not very hype on the laws of hacking. But that doesnt surprise, at the very least they were maliciously taking over someone elses property. That's technically theft (?)

[Dashrender]

The homeowner could have also had UPNP enabled in their firewall allowing the hackers to gain direct access

[DustinB3403]

@WrCombs said in Couples Nest Security Hacked:

@DustinB3403 said in Couples Nest Security Hacked:

Technically speaking the person who "hacked" into this system can still be brought up on charges of "hacking". Regardless of the insecure passwords and failure to use 2FA.

Im not very hype on the laws of hacking. But that doesnt surprise, at the very least they were maliciously taking over someone elses property. That's technically theft (?)

No it's illegal hacking. Plain and simple.

"You aren't allow in here, because you broke in".

The same thing applies in this example.

"I leave my house unlocked and the doors open while I'm gone for the day, someone comes in and steals all of my stuff".

Am I at fault? Sure somewhat for not using deterrents to prevent theft (locking my doors), but it's still illegal to enter someones property without consent and steal their stuff.

[coliver]

@Dashrender said in Couples Nest Security Hacked:

The homeowner could have also had UPNP enabled in their firewall allowing the hackers to gain direct access

Is that possible with Nest?

[Dashrender]

@coliver said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

The homeowner could have also had UPNP enabled in their firewall allowing the hackers to gain direct access

Is that possible with Nest?

With nest I don’t know with others absolutely

[WrCombs]

@Dashrender said in Couples Nest Security Hacked:

The homeowner could have also had UPNP enabled in their firewall allowing the hackers to gain direct access

So you're saying that potentially their router had UPnP enabled and from there opened the port to the camera\security system?

(sorry for the noob-ish question, Never heard of that until google told me what it was.)

[DustinB3403]

How you get in doesn't matter, since you legally aren't welcome there.

You aren't welcome in my house, you aren't welcome to watch my security cameras.

It's B and E at a minimum via hacking.

[WrCombs]

@DustinB3403 said in Couples Nest Security Hacked:

How you get in doesn't matter, since you legally aren't welcome there.

You aren't welcome in my house, you aren't welcome to watch my security cameras.

It's B and E at a minimum via hacking.

That's completely understandable.

[Dashrender]

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

The homeowner could have also had UPNP enabled in their firewall allowing the hackers to gain direct access

So you're saying that potentially their router had UPnP enabled and from there opened the port to the camera\security system?

(sorry for the noob-ish question, Never heard of that until google told me what it was.)

Yep tons of shitty consumer stuff does that

[WrCombs]

@Dashrender said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

The homeowner could have also had UPNP enabled in their firewall allowing the hackers to gain direct access

So you're saying that potentially their router had UPnP enabled and from there opened the port to the camera\security system?

(sorry for the noob-ish question, Never heard of that until google told me what it was.)

Yep tons of shitty consumer stuff does that

but for why?

[DustinB3403]

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

The homeowner could have also had UPNP enabled in their firewall allowing the hackers to gain direct access

So you're saying that potentially their router had UPnP enabled and from there opened the port to the camera\security system?

(sorry for the noob-ish question, Never heard of that until google told me what it was.)

Yep tons of shitty consumer stuff does that

but for why?

Because they are there to sell shitty consumer cameras "accessible from anywhere in the world".

Via an RTSP feed directly from the device. . .

[WrCombs]

@DustinB3403 said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

The homeowner could have also had UPNP enabled in their firewall allowing the hackers to gain direct access

So you're saying that potentially their router had UPnP enabled and from there opened the port to the camera\security system?

(sorry for the noob-ish question, Never heard of that until google told me what it was.)

Yep tons of shitty consumer stuff does that

but for why?

Because they are there to sell shitty consumer cameras "accessible from anywhere in the world".

Via an RTSP feed directly from the device. . .

which also means that anyone with half a brain incyber security can get into your cameras just as well. ...

Edit
that's the most idiotic thing I've ever heard.

[DustinB3403]

@WrCombs said in Couples Nest Security Hacked:

@DustinB3403 said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

The homeowner could have also had UPNP enabled in their firewall allowing the hackers to gain direct access

So you're saying that potentially their router had UPnP enabled and from there opened the port to the camera\security system?

(sorry for the noob-ish question, Never heard of that until google told me what it was.)

Yep tons of shitty consumer stuff does that

but for why?

Because they are there to sell shitty consumer cameras "accessible from anywhere in the world".

Via an RTSP feed directly from the device. . .

which also means that anyone with half a brain incyber security can get into your cameras just as well. ...

Don't even need that much. The feed is literally just sitting out on the open internet waiting for anyone to go to a self hosted webpage to view.

[WrCombs]

@DustinB3403 said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@DustinB3403 said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

The homeowner could have also had UPNP enabled in their firewall allowing the hackers to gain direct access

So you're saying that potentially their router had UPnP enabled and from there opened the port to the camera\security system?

(sorry for the noob-ish question, Never heard of that until google told me what it was.)

Yep tons of shitty consumer stuff does that

but for why?

Because they are there to sell shitty consumer cameras "accessible from anywhere in the world".

Via an RTSP feed directly from the device. . .

which also means that anyone with half a brain in cyber security can get into your cameras just as well. ...

Don't even need that much. The feed is literally just sitting out on the open internet waiting for anyone to go to a self hosted webpage to view.

/sigh
that's ridiculous.

[Dashrender]

@WrCombs said in Couples Nest Security Hacked:

@DustinB3403 said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@DustinB3403 said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

The homeowner could have also had UPNP enabled in their firewall allowing the hackers to gain direct access

So you're saying that potentially their router had UPnP enabled and from there opened the port to the camera\security system?

(sorry for the noob-ish question, Never heard of that until google told me what it was.)

Yep tons of shitty consumer stuff does that

but for why?

Because they are there to sell shitty consumer cameras "accessible from anywhere in the world".

Via an RTSP feed directly from the device. . .

which also means that anyone with half a brain in cyber security can get into your cameras just as well. ...

Don't even need that much. The feed is literally just sitting out on the open internet waiting for anyone to go to a self hosted webpage to view.

/sigh
that's ridiculous.

Not really what is ridiculous is that there is no authentication mechanism in place. That is the fault of the maker

[WrCombs]

@Dashrender said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@DustinB3403 said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@DustinB3403 said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

The homeowner could have also had UPNP enabled in their firewall allowing the hackers to gain direct access

So you're saying that potentially their router had UPnP enabled and from there opened the port to the camera\security system?

(sorry for the noob-ish question, Never heard of that until google told me what it was.)

Yep tons of shitty consumer stuff does that

but for why?

Because they are there to sell shitty consumer cameras "accessible from anywhere in the world".

Via an RTSP feed directly from the device. . .

which also means that anyone with half a brain in cyber security can get into your cameras just as well. ...

Don't even need that much. The feed is literally just sitting out on the open internet waiting for anyone to go to a self hosted webpage to view.

/sigh
that's ridiculous.

Not really what is ridiculous is that there is no authentication mechanism in place. That is the fault of the maker

Okay, fair enough.
So when I think of accessing cameras anywhere i start thinking of "Ring" doorbells, Similar situation here?

[DustinB3403]

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@DustinB3403 said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@DustinB3403 said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

The homeowner could have also had UPNP enabled in their firewall allowing the hackers to gain direct access

So you're saying that potentially their router had UPnP enabled and from there opened the port to the camera\security system?

(sorry for the noob-ish question, Never heard of that until google told me what it was.)

Yep tons of shitty consumer stuff does that

but for why?

Because they are there to sell shitty consumer cameras "accessible from anywhere in the world".

Via an RTSP feed directly from the device. . .

which also means that anyone with half a brain in cyber security can get into your cameras just as well. ...

Don't even need that much. The feed is literally just sitting out on the open internet waiting for anyone to go to a self hosted webpage to view.

/sigh
that's ridiculous.

Not really what is ridiculous is that there is no authentication mechanism in place. That is the fault of the maker

Okay, fair enough.
So when I think of accessing cameras anywhere i start thinking of "Ring" doorbells, Similar situation here?

Ring and Nest generally have authentication.

This person was just a jackass and ignored all of it.

[Dashrender]

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@DustinB3403 said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@DustinB3403 said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

The homeowner could have also had UPNP enabled in their firewall allowing the hackers to gain direct access

So you're saying that potentially their router had UPnP enabled and from there opened the port to the camera\security system?

(sorry for the noob-ish question, Never heard of that until google told me what it was.)

Yep tons of shitty consumer stuff does that

but for why?

Because they are there to sell shitty consumer cameras "accessible from anywhere in the world".

Via an RTSP feed directly from the device. . .

which also means that anyone with half a brain in cyber security can get into your cameras just as well. ...

Don't even need that much. The feed is literally just sitting out on the open internet waiting for anyone to go to a self hosted webpage to view.

/sigh
that's ridiculous.

Not really what is ridiculous is that there is no authentication mechanism in place. That is the fault of the maker

Okay, fair enough.
So when I think of accessing cameras anywhere i start thinking of "Ring" doorbells, Similar situation here?

There definitely could be, but I do not believe that the ring video doorbell uses there definitely could be, but I do not believe that the ring video doorbell uses P UPNP To open any ports on your firewall.

[Dashrender]

@DustinB3403 said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@DustinB3403 said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@DustinB3403 said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

The homeowner could have also had UPNP enabled in their firewall allowing the hackers to gain direct access

So you're saying that potentially their router had UPnP enabled and from there opened the port to the camera\security system?

(sorry for the noob-ish question, Never heard of that until google told me what it was.)

Yep tons of shitty consumer stuff does that

but for why?

Because they are there to sell shitty consumer cameras "accessible from anywhere in the world".

Via an RTSP feed directly from the device. . .

which also means that anyone with half a brain in cyber security can get into your cameras just as well. ...

Don't even need that much. The feed is literally just sitting out on the open internet waiting for anyone to go to a self hosted webpage to view.

/sigh
that's ridiculous.

Not really what is ridiculous is that there is no authentication mechanism in place. That is the fault of the maker

Okay, fair enough.
So when I think of accessing cameras anywhere i start thinking of "Ring" doorbells, Similar situation here?

Ring and Nest generally have authentication.

This person was just a jackass and ignored all of it.

Lol, Nest was one of the big companies that had huge security feelings a few years ago. I don’t care that google owns them I will never trust them.

[DustinB3403]

@Dashrender said in Couples Nest Security Hacked:

@DustinB3403 said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@DustinB3403 said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@DustinB3403 said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

The homeowner could have also had UPNP enabled in their firewall allowing the hackers to gain direct access

So you're saying that potentially their router had UPnP enabled and from there opened the port to the camera\security system?

(sorry for the noob-ish question, Never heard of that until google told me what it was.)

Yep tons of shitty consumer stuff does that

but for why?

Because they are there to sell shitty consumer cameras "accessible from anywhere in the world".

Via an RTSP feed directly from the device. . .

which also means that anyone with half a brain in cyber security can get into your cameras just as well. ...

Don't even need that much. The feed is literally just sitting out on the open internet waiting for anyone to go to a self hosted webpage to view.

/sigh
that's ridiculous.

Not really what is ridiculous is that there is no authentication mechanism in place. That is the fault of the maker

Okay, fair enough.
So when I think of accessing cameras anywhere i start thinking of "Ring" doorbells, Similar situation here?

Ring and Nest generally have authentication.

This person was just a jackass and ignored all of it.

Lol, Nest was one of the big companies that had huge security feelings a few years ago. I don’t care that google Alphabet owns them I will never trust them.

I've FTFY.

[WrCombs]

@DustinB3403 said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

@DustinB3403 said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@DustinB3403 said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@DustinB3403 said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

@WrCombs said in Couples Nest Security Hacked:

@Dashrender said in Couples Nest Security Hacked:

The homeowner could have also had UPNP enabled in their firewall allowing the hackers to gain direct access

So you're saying that potentially their router had UPnP enabled and from there opened the port to the camera\security system?

(sorry for the noob-ish question, Never heard of that until google told me what it was.)

Yep tons of shitty consumer stuff does that

but for why?

Because they are there to sell shitty consumer cameras "accessible from anywhere in the world".

Via an RTSP feed directly from the device. . .

which also means that anyone with half a brain in cyber security can get into your cameras just as well. ...

Don't even need that much. The feed is literally just sitting out on the open internet waiting for anyone to go to a self hosted webpage to view.

/sigh
that's ridiculous.

Not really what is ridiculous is that there is no authentication mechanism in place. That is the fault of the maker

Okay, fair enough.
So when I think of accessing cameras anywhere i start thinking of "Ring" doorbells, Similar situation here?

Ring and Nest generally have authentication.

This person was just a jackass and ignored all of it.

Lol, Nest was one of the big companies that had huge security feelings a few years ago. I don’t care that google Alphabet owns them I will never trust them.

I've FTFY.

Fixed what?
Wtf is Alphabet

[DustinB3403]

@WrCombs the new parent company of Google.