P2P – Network Securitas

February 18, 2016

This is Why People Fear the ‘Internet of Things’

This post was originally published on this siteImagine buying an internet-enabled surveillance camera, network attached storage device, or home automation gizmo, only to find that it secretly and constantly phones home to a vast peer-to-peer (P2P) network run by the Chinese manufacturer of the hardware. Now imagine that the geek gear you bought doesn’t actually let you block this P2P communication without some serious networking expertise or hardware surgery that few users would attempt. The FI9286P, a Foscam camera that includes P2P communication by default. This is the nightmare “Internet of Things” (IoT) scenario for any system administrator: The IP cameras that you bought to secure […]

March 10, 2017

Dahua, Hikvision IoT Devices Under Siege

This post was originally published on this siteDahua, the world’s second-largest maker of “Internet of Things” devices like security cameras and digital video recorders (DVRs), has shipped a software update that closes a gaping security hole in a broad swath of its products. The vulnerability allows anyone to bypass the login process for these devices and gain remote, direct control over vulnerable systems. Adding urgency to the situation, there is now code available online that allows anyone to exploit this bug and commandeer a large number of IoT devices. On March 5, a security researcher named Bashis posted to the Full […]

October 9, 2018

Naming & Shaming Web Polluters: Xiongmai

This post was originally published on this siteWhat do we do with a company that regularly pumps metric tons of virtual toxic sludge onto the Internet and yet refuses to clean up their act? If ever there were a technology giant that deserved to be named and shamed for polluting the Web, it is Xiongmai — a Chinese maker of electronic parts that power a huge percentage of cheap digital video recorders (DVRs) and Internet-connected security cameras. A rendering of Xiongmai’s center in Hangzhou, China. Source: xiongmaitech.com In late 2016, the world witnessed the sheer disruptive power of Mirai, a powerful […]

April 26, 2019

P2P Weakness Exposes Millions of IoT Devices

This post was originally published on this siteA peer-to-peer (P2P) communications technology built into millions of security cameras and other consumer electronics includes several critical security flaws that expose the devices to eavesdropping, credential theft and remote compromise, new research has found. A map showing the distribution of some 2 million iLinkP2P-enabled devices that are vulnerable to eavesdropping, password theft and possibly remote compromise, according to new research. The security flaws involve iLnkP2P, software developed by China-based Shenzhen Yunni Technology. iLnkP2p is bundled with millions of Internet of Things (IoT) devices, including security cameras and Webcams, baby monitors, smart doorbells, and […]