Welcome, Guest. Please login or register.
Did you miss your activation email?
May 25, 2013, 04:55:17 AM

Login with username, password and session length

664032 Posts
70630 Topics
145258 Members

Latest Member: nltdbsss

Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Security Products & Services
| |-+  Comodo Internet Security - CIS
| | |-+  News / Announcements / Feedback - CIS
| | | |-+  Wireless Webcam - A vulnerability ?
« previous next »
Pages: [1] 2 Go Down Print
Author Topic: Wireless Webcam - A vulnerability ?  (Read 5678 times)
Aikno
Comodo Family Member
***
Offline Offline

Posts: 75


« on: June 26, 2012, 09:03:40 PM »

Hi,
So today a family member told me about a "Dr. Phil" episode in each it was debated (not much of a debate) what happened in a district school in Philly regarding the use of webcams to spy on kids.
In that episode they invited some IT guy, this guy stated that it was very easy for someone to hack in to a laptop and access a persons Webcam.
According to him it would take 30 mins. max. to gain control of someone's webcam if the attacker and the person were on the same wireless network. He guaranteed that (to a person with knowledge) it was always possible to gain control over it independently of the computer security! in 30 mins.!!

I do not have an episode link, but I ill try to get it so you guys can see what I am talking about.
Now my questions are, is it in fact possible to a third person to gain access to a computer's webcam if they are on the same network? wireless or wired
How does Comodo protects against this type of network attacks. (I am guessing it would have to be some sort of exploitation)
Logged
loveboy_lion
Comodo's Hero
*****
Offline Offline

Posts: 465


COMODO Is Good Hope We Make it The BEST !


WWW
« Reply #1 on: June 27, 2012, 02:07:57 AM »

The best way to avoid this situation is to disable webcam when not in use
I don't know how comodo firewall works on wireless connection but you can set comodo to block all incoming connection so that you wont be hacked easily
tis also maybe of some help
http://www.ehow.com/how_4716707_prevent-webcam-being-hacked.html
Logged

EricJH
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 16722



« Reply #2 on: June 27, 2012, 01:47:47 PM »

They will start with ARP cache poisoning for which CIS will protect when enabled. ARP cache poisoning will allow to have the local traffic router through their laptop.

If you on top of that don't share files and folders over your local network and have CIS set to stealth these people will have a hard time trying to get in
Logged

John Buchanan
The greatest victory comes from the battle within.
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 5424


Personal Dragons can be defeated. Improve yourself


« Reply #3 on: June 27, 2012, 04:48:41 PM »

I think the real issue is accessing the web cam itself.
As the ones I looked at would connect to your private network via a wireless router,  it is safe to say the security measures available in your router for wireless connections should be set to the maximum or highest possible including stealth (don't broadcast) and a strong password.
Logged

Please follow Comodo Forum Policy
SanyaIV
Comodo's Hero
*****
Offline Offline

Posts: 882



« Reply #4 on: June 27, 2012, 04:50:00 PM »

They will start with ARP cache poisoning for which CIS will protect when enabled. ARP cache poisoning will allow to have the local traffic router through their laptop.

If you on top of that don't share files and folders over your local network and have CIS set to stealth these people will have a hard time trying to get in
This is all assuming the webcam is wirelessly communicating directly to a computer with CIS installed, now what if it's a network webcam?
Logged

"Mrreow~"
-Friendly Neighborhood Kitty
EricJH
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 16722



« Reply #5 on: June 27, 2012, 08:15:02 PM »

This is all assuming the webcam is wirelessly communicating directly to a computer with CIS installed, now what if it's a network webcam?
Then the camera will need its own security measures along side the measure suggested by John
Logged

Boris 3
Comodo's Hero
*****
Offline Offline

Posts: 1284



« Reply #6 on: June 28, 2012, 01:12:25 AM »

Webcams and microphones hijacking seems to be already exploited by Cyber criminals through a functionality of Flash Player http://www.pcworld.com/businesscenter/article/255979/banking_malware_monitors_victims_by_hijacking_webcams_and_microphones_researchers_say.html
Logged
Ronny
Product Translator
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 13184


Volunteer Moderator


« Reply #7 on: June 28, 2012, 10:25:34 AM »

Make sure you set you WIFI to WPA2 - AES, no TKIP. and use a strong key, long, mixed chars etc.
Never ever use a dictionary word as a paraphrase!, as that can be cracked in minutes.
Also make sure to disable WPS as that can be tricked over the wireless network by the attacker.

If you set these the hacker can't get access to the wireless traffic cause it's point-to-point encrypted.
Other attacks might be done but they should be on the level of the PC monitoring this webcam, like the mentioned flash attack etc.
Logged

Volunteer Moderator
Any concerns? Please send me a PM or review the Forum Policy -  update Jan 3rd 2013!
John Buchanan
The greatest victory comes from the battle within.
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 5424


Personal Dragons can be defeated. Improve yourself


« Reply #8 on: June 28, 2012, 05:26:31 PM »

Add the option not to broadcast as you are less likely to be hacked if they don't know you are there.
Logged

Please follow Comodo Forum Policy
Ronny
Product Translator
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 13184


Volunteer Moderator


« Reply #9 on: June 29, 2012, 03:38:03 PM »

Please beware that this does not add security to your WIFI it will only hide it for the one's that don't know where to look  Wink
Logged

Volunteer Moderator
Any concerns? Please send me a PM or review the Forum Policy -  update Jan 3rd 2013!
Aikno
Comodo Family Member
***
Offline Offline

Posts: 75


« Reply #10 on: June 29, 2012, 04:15:14 PM »

I am actually refering to a Webcam integrated in a Laptop, not a wireless webcam in a Network. I apologize if the title of this topic is a bit confusing.

It is that easy to hack into someone's webcam !??
I do have those wireless security meaures in place, with exception of the broadcasting SSID, but with the area around my house (garden) it is unlikely that someone would ever pick up the signal, even inside the house the wireless reception is terrible!

My biggest concern is when I am using Wifi networks in library, Restaurants, Malls, etc, someone else can easily hack into my computer? no matter what security I have if they are on the same network? Actually if they can gain control over the Webcam aren't they also able to access all my files?
Logged
Ronny
Product Translator
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 13184


Volunteer Moderator


« Reply #11 on: June 29, 2012, 04:31:44 PM »

If you use public/open WIFI ALWAYS use a product like 'Trust Connect' or other VPN providers that give you a encrypted tunnel from your laptop towards that provider.
On that provider edge you will enter the internet unencrypted, this makes it hardly possible for attackers to 'see' your traffic.
And as ever watch your SSL bar, and verify the Certificate and force 'hard-fail' in your browser for OCSP/CRL requests so that if the cert is fake your browser will block it.

https://wiki.mozilla.org/CA:OCSP-HardFail
Logged

Volunteer Moderator
Any concerns? Please send me a PM or review the Forum Policy -  update Jan 3rd 2013!
Co-Mo-Do
Comodo's Hero
*****
Offline Offline

Posts: 427


Co-Mo-Do BOts Clean


« Reply #12 on: June 30, 2012, 04:54:53 PM »

Was it something like this http://vimeo.com/31005812 Webcam [Short Film]?
Logged

Optimus Maximus Securitus, all aboard the Comodobus
Aikno
Comodo Family Member
***
Offline Offline

Posts: 75


« Reply #13 on: July 02, 2012, 09:04:48 AM »

Was it something like this http://vimeo.com/31005812 Webcam [Short Film]?
No, I was reffering to an episode of "Dr. Phill" in wich they invited an IT expert (??) to debate webcam vulnerability.
I finnaly got the episode uploaded to youtube. Please take a look at what the IT guy said. Is that all true? regarding that it is that easy to do it and that network protection is not based on keeping ppl out but in detecting ppl when they got in?!
Also does comodo automatically protects me from this attacks? ARP chace is the only option that I should enable?

Quote
If you use public/open WIFI ALWAYS use a product like 'Trust Connect' or other VPN providers that give you a encrypted tunnel from your laptop towards that provider.
I now that VPN would provide me with aditional security but it is a paid service. I use free Wifi Hotspots because I don't have to pay for the internet. If I was to pay for anything I would prefer a 3G connection since I would be immune to this attacks and I would have internet almost every where.
But doesn't comodo firewall protects againts this type of exploits? I mean if Comodo Firewall doesn't protect me then what will?
« Last Edit: July 02, 2012, 09:06:35 AM by Aikno » Logged
EricJH
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 16722



« Reply #14 on: July 02, 2012, 11:55:31 AM »

I watched the video and I think there is some sloppy journalism and scaremongering going on there. It really brings steam out of my ears and nose with anger.

There's actually a lot of factors involved in that In return for this honesty the expert gets reprimanded and the dumbing down sets in

"and the wireless is on their wirelss.The expert assumes that he has access to the neighbours wireless. Assuming the neighbours did not give him access he would need to use an ARP cache poisoning attack. CIS will protect from that (it needs to be enabled though)

It may sometime take less than 5 minutes sometimes to get in.If the ARP cache poisoning attack had succeeded you would still need to crack the encryption. The outdated and now depricated WEP encryption can be hacked that quickly. Most people are no longer using that. WPA/WPA2 takes much much longer.

there are ports open that allow that to happenThat is only if  sharing files and folders over the local network is enabled. Otherwise there will not be an open port when using CIS.

ports are like a door, when you open that door anybody can come in just as long as you know how to get there. Standard ports are related to a specific program or Windows service and hacktools will try to target vulnerabilities for those. Only when unpatched vulnerabilities exists hacktools can abuse the entrance an open port provides. That's why it is important to have your OS and programs up to date. That way you will be sure there as little vulnerable programs or services as possible. On top of that the Buffer Overflow protection of CIS will catch almost all of the unpatched vulnerabilities.

We may not be secure as we think we are,.. particular with wireless...That's the scare mongering punch line Dr Phil wanted to make

If somebody has access to your local network it is really easy The expert restated that
assumption. Remember how he started with "There's actually a lot of factors involved in that". Let's give him the benefit of the doubt that he is now trying to tell a more complete story after he has been run over by Dr. Phil and his desire to make a scaremongering punch line

In the introduction the expert states the following:
  • There is a new school of thought in security.We used spend all our money and everything on trying to prevent people from coming in.When looking with the Comodo, and other HIPS based firewalls, perspective. With D+ and sandbox preventing malware from entering the system in the first place is what sets these products apart from the classical solution with AV program and network only firewall.
  • That's no longer the case. Now it's about monitoring how people have come in, how fast you can detect people and how to get rid off them from coming in.Not something Comodo believes in. Prevention is what Comodo brings; malware is not infecting the system. Remember that when infected with an information seeking malware all the information it is after is send in the first 2-3 minutes after infection. We don't want it in and CIS does a very good job preventing it entering in the first palce

And before I forget. There is another very simple solution everybody can take. Put a something over the lens when not using the camera.

I chose to respond to quotes from the show and that may scatter the information. I hope my comments help to understand that things are not as simple as presented in the show, that it takes more effort than suggested to break in and enter and that CIS will protect you from getting infected in the first place.
« Last Edit: July 03, 2012, 08:21:17 AM by EricJH » Logged

Tags:
Pages: [1] 2 Go Up Print 
« previous next »
Jump to:  

SSL Certificate Free Virus Removal Firewall
Page created in 0.671 seconds with 20 queries.
Powered by SMF 1.1.18 | SMF © 2006, Simple Machines Design by 7dana.com