Anyone used the shodan plugin for firefox or chrome? Security issues?

Patrick O'Callaghan pocallaghan at gmail.com
Thu May 21 11:02:59 UTC 2015


On Wed, 2015-05-20 at 18:26 -0700, stan wrote:
> Hi,
> I just read a news article, 
> http://www.abc15.com/news/national/cyber-alert-hundreds-of-thousands-of-unsecure-cameras-streaming-live-on-the-internet
> about a service called shodan,
> https://www.shodan.io
> that searches for web connected devices, and indicates whether 
> they are unprotected or not.
> 
> The article gave examples of webcams and devices that are connected to
> the web, and wide open.  A quick search for webcam showed many.  There
> was the offer to install a firefox plugin. I'm leary; a web site
> offering lists of access to unsecured devices wants to install
> something on my computer.
> 
> Has anyone had experience with this, or any information on whether it
> is a security risk or not?
> 
> I doubt anyone on this list is exposed, but this could be considered a
> heads up to secure any devices attached to the web.  It noted that many
> devices are left with the default password only, and that default
> passwords are available on the web.  For example, a guy demonstrated how
> he could adjust his insulin pump via the web by hacking it.

Yes, there are many such devices, and yes they do represent security
hazards. However nothing about this is particularly new.

poc



More information about the users mailing list