Finding WEIRD Devices on the Public Internet

[@_JohnHammond]

wow that really grinds my gears anyways check this out to learn more cybersecurity jh.live/training and join my newsletter jh.live/newsletter for more like this

[@drooplug]

I think those cameras on the billboards are supposed to be public. It's probably so clients can confirm their ads are being shown.

[@omegadroidzero]

You would think they would disable the ability to interact with the camera controls AND have a restricted general account with a password.

[@drooplug]

@@omegadroidzero That's a very good point. Although, maybe the controls don't actually work.

[@chrissametrinequartz9389]

@@drooplug The one where it had the lady working, the controls do indeed work (but you can only rotate the camera left for some reason but yea they do work or atleast that one did)

[@vvvvvvvvvvv631]

I doubt it. If you search long enough you will find there are cameras from the same vendor inside peoples houses. I doubot those are supposed to be public.

[@mdsaraj6564]

​@@omegadroidzero

[@jdkap201]

At 23:05 the German IP Webcam "Stützerbach - Blick vom Schlossberg" is most likely a "wether cam". So it's a webcam that's actually meant to be publicly accessible to check the weather status. Those are common in Germany and pretty neat if you think about going for a trip to some place but are unsure about the weather conditions.

[@bentech2757]

Also have them at rural landing strips

[@Mr.Unacceptable]

Common in Canada for highways and ski resorts wildlife trails and so many things. Just search for online web cam or trail cam you will find sites that link all they have found. Search Highway [#] cam. [Ski hill] cam. [valley, trail or area] cam.

[@NOMAd_THe_HACKEr]

To everyone saying he didn’t hide the IPs, it’s literally on the open internet

[@iuse9646]

EXACTLY

[@NOMAd_THe_HACKEr]

And most of these are gonna be honeypot traps. So noobs beware😂

[@johndorian4078]

i mean just because my house is open to the public doesn't make it any less a crime to go into my house. So him showing the IP's of the places he's gray area illegally going................

[@maktiki]

@@NOMAd_THe_HACKEr No man people are crazy whole factories have their siemens s7 public. You stop the factory youll see theyll fix it in 1 day lol

[@ai-spacedestructor]

@@johndorian4078 in law there is no such thing as grey area, either its legal or its not. im not a lawyer and i cant tell about laws in other countries but i believe at least here in germany your fine as long as you make sure to only show publicaly available information. which would mean he wouldnt even need to censor anything.

[@douro20]

I once found a camera system on the Internet at someone's house in the middle of nowhere...and somehow ended up moving into the house about a decade later...

[@jmr]

I think that puts you the beginning of a horror movie or true crime podcast. I'll try to watch when you are on 48 hours or wherever you end up.

[@fotografm]

Do the owners know you moved in ?

[@swoop8047]

Two sentence horror right here.

[@JadyGrudd]

Wow

[@MandrakeDCR]

I saw that movie... did you ever cure the trolls? Or are they still rampaging around with rabies ruining everyone's vacation?

[@guiorgy]

This isn't only useful to cyber security experts, but also to show people why they shouldn't easily trust anything that connects to the internet, especially things with weak authentication, and even more so with none

[@MrRoguetech]

It may be useful for end users, but it's not nearly user friendly enough for most people to understand, so it's most useful for anyone who find and take advantage of those with weak authentication.

[@mapache2185]

Lmao use shodan shit you can actually just use google to search for shit if you know the right commands

[@birchna]

At which point did we go from "i just wanna host a Buffy fansite" or "i just wanna share a couple tunes with buddies" to "anything you post publically is going to be relentlessly scraped, vulnerability scanned for profit, and used in the next LLM model whether you like it or not" ?

[@xylxylxylxyl]

People have been scraping and scanning for decades. Tools like nmap have existed since 1997. Governments have most likely been on top of this way before then. The LLM stuff is debatable though.

[@petermolineus3905]

Since altavista, hotrod and (of course) the emerge of google....

[@jfbeam]

I'd say the very day AOL connected to the internet.

[@Iisakki3000]

?? Maybe just don't make it public if you don't want it to be public. Simple as that.

[@alakani]

Never? People were wardialing before the internet even existed

[@bugprove]

Isn't it reassuring that embedded products are generally mature and secure, without firmware vulnerabilities... Oh... Wait...

[@foxronyo]

This is incredibly worrying, but it's also important to show how much of your connections are available on the internet, and why securing those connections is so very necessary. Today it's a demonstration, tomorrow it's a legitimate malicious agent.

[@speedyferg]

Not something you have to worry about unless you’re actively port forwarding your cctv cameras for all to see (or using upnp)

[@idontexist-satoshi]

What is even more worrying is how easy it is to index them all ;) I have over 30k indexed worldwide, and it doesn't even matter if they shut the camera down. I still see everything and gave access to my GPT-4 model.

[@Guyfrommars183]

I learned a valuable lesson long ago: Nothing you do on the internet is truely private.

[@idontexist-satoshi]

@@Guyfrommars183 It is but only when you make it private unless the provider gets hacked or there is an exploit, most the time it's more about what you share yourself. If you want to share your whole life, then prepare for it to be achieved somewhere.

[@TheBenSanders]

Fully expected John to be using Shodan lmao

[@revenevan11]

Same lol, but it's cool to see a search engine of that sort that I hadn't heard of

[@maktiki]

@@revenevan11 You can scan the whole internet(every ipv4 adress) in 6-12 minutes. You only need a 10-20gbit internet speed. So in theory every person could know all device that are connected and interact with them. It is the whole purpose of this system.

[@mapache2185]

Why? This dude is a joke

[@nuggetbugget9305]

Me too

[@dancoroian1]

​@@mapache2185 it would seem you find that joke funny

[@Capiosus]

geoguessr guy needs to find them to email the people that their devices are open

[@Apple_Beshy]

It's literally a public camera 💀

[@CWINDOWSsystem32]

Email? Nah, a physical letter typed on a typewriter.

[@pauljs75]

If you're old enough, you remember "IP Cam trolling" because people were lazy with securing their networked devices. Such hijinks were a thing for a while on at least one of the Chans. The main "feature" allowing the troll was that the cameras had a speaker in addition to the mic, allowing the observer to disturb the observed in some manner. KZbin took videos about those down after some TOS change in the 2010's, even the ones that were more silly than malicious. (The ones I liked is where the guy bugging people eventually tells them to put a password on it at least. So the troll served a basic lesson in network security.) Despite all that, seems some things really never changed much. The "hack" is that things are still exposed to a lot of search engines depending on how the hosting works, so it's just a matter of knowing the keywords to bring them up.

[@adultdeleted]

i used to watch these cameras when i was a teenager. i liked to see what other countries were like, especially the weather, and watch people who had no idea. i tried to notify them if it was in a home, but i doubt anyone got the hint. i remember panicking once when i broke a business's security camera.

[@LunaTulpa]

*duck tales theme starts playing*

[@tonyb9864]

I really like the fact that viewers can SEE the code (and terminal) that you discuss in your videos! I can always see your code clearly and thanks so much for doing this! Most content creators that I see on KZbin post their code in small size font where I can hardly see it.

[@dalamar666]

I remember finding something similar back in like 08. There was a site that you could browse public IP's for various cameras in your geographic location. There was a map and you could increase or decrease the range. It was interesting some of the cameras you could access. A few of the colleges in the area were wide open.

[@phlosen7854]

Oh man.... The "S" in IOT stands for "Security"

[@erbse1178]

23:00 Blick vom Schlossberg - View from the castle on the hill. (down to the village, somewhere in Thuringia, Germany)

[@rsclub2242]

somewhere, to be more accurate: around a city called "Ilmenau". It is also located on the Mountain Range called "Rennsteig".

[@Kurtea00]

0:06 that's a public webcam of the city of Stützerbach in Austria.

[@CypherX-Sec]

Ohh don't mention the names bro ;)

[@Xe4ro]

It says it at the top of the image ;)

[@teabola]

@@CypherX-Sec 9:01 is Edmonton, Alberta. Recognized the area code and business lol

[@teabola]

@@leaaon460 yes, it is lmao. 780 is the area code for edmonton, alberta. I live here. I think I know the area code and the dentist I go to

[@joedalton77]

It's not, the camera would be upside down if it were Australia 🙃

[@jmr]

I haven't done this for years! I found a freaky lobby cam once that I never saw anyone enter or exit. It was like one of those creepy alternate world things people talk about. "An Empty World, A Time Traveler, Another Dimension" 🤣

[@ValiantNomad]

Makes sense. Most of the more popular hotels, etc have higher security on their security systems. They wouldn't be publicly accessible online, so if it was a hotel or something else, probably was lower class. From what I can tell, the high class ones run on their own private networks, not just openly online.

[@jmr]

@767corp ⬆ THIS! Lowest bidder. Third party contractors. I've been mortified by what pen testers have found in "secure office buildings" and hotels. There's a security flaw in "millions of hotel-room doors" right now that I'm not seeing get fixed too fast.

[@stevengill1736]

You mean like the back rooms? Liminal spaces with a webcam, cool!

[@jmr]

@@stevengill1736 Exactly, it's very strange to see a camera inside a building at an entrance but never see movement. Not knowing where the camera was located only adds to the mystery.

[@JimNichols]

I have never watched your channel before but I understand why you have 1.45 million subs, great booming voice coupled with some amazing oration skills added to some great video work, scripting and editing makes you really awesome at what you do. Great video and thank you for the information.

[@Mr.Unacceptable]

You can do a search for online web cams and come up with thousands of cameras being linked from many sites that have already found them. Their private collection must be amazing.

[@Ro-Bucks]

I was bord one day and found out you can watch some security cameras online depending on the company that provides the service. I watched a store front downtown Toronto (known location) at the end of the day the guy takes the money out of the register to count it then puts it into a popsicle box in the freezers with the other popsicles. would be a good idea if his cameras weren't public.

[@kabaduck]

There's a bunch of cameras that come out with open ports, there was a whole series of HIKvision cameras that are exposed if you only know the IP address in the correct port number

[@cvall1710]

Baby monitors, nanny cams, webcams, security cams, ect... Only way to stop it is to practice safe networking

[@TheAshran]

Whats the difference between Censys and Shodan?

[@capability-snob]

Way to represent, Melbourne! First St Vinnies, then billboard monitoring.

[@ShaunRuigrok]

I did not expect to see a webcam of the billboard ad at Kew Junction!!

[@LuluTheCorgi]

Webcam surfing is so fun, found someones grow tent once had a dozen plants in beautiful late flower lol

[@BIGV1N]

The segment about the BrightSign players was particularly interesting to me. I JUST had an issue with a client who had someone upload some "non approved" content to their BrightSign player. It was just so relevant this recent issue made me laugh!

[@gavskuzz]

Brilliant! love the way you present with such energy! Cheers!

[@fotografm]

Searches are limited to 10 per day unless you create a login.

[@arizali_]

What is the difference between censys and shodan?

[@Pr0toc01]

This video is making my ears ring. I dont know if its something with the audio encoding pre/post upload, but there is something in the really high frequency range, edge of hearing, that im picking up. Almost "feel it" more than hear it. I dont hear it during the KZbin injected ads, but as soon as the content video comes back I hear it. Maybe look at your audio? really great video. Love seeing people covering things like Shodan and Censys.

[@Matthews_Dintwe]

Woah you're right, my ears were ringing loud until I paused after I seen your comment.

[@fabianweber6937]

25:53 gute Preise, gute Besserung 😂 (That's the slogan from the company ratiopharm)

[@ExperiencersInternational]

VNC Resolver is something very similar to this which posts random snapshots on fedi

[@Noratekki]

Isn't that by the guy who made CollabVM?

[@ExperiencersInternational]

@@Noratekki I wouldn't know

[@PoringPoring951]

I'm more curious on the shirt/cloth John is wearing. It looks so shiny and cool looking.

[@Synthetic-Chicken]

Remember looking at all this kind of stuff back before GUI, just using command line or crude level text and being blown away at how much was on the open internet.

[@Revamped1953]

You do see how people can avoid honeypots with this right? Hey it would be cool if you made a video to see if you can get into these cameras on boats in the ocean.

[@TUXbeatDOWN]

I giggled when I saw the "Try one of these examples" and the first example shown was "Russian hosts running RDP or FTP". 🤣

[@ChronicNewb]

The billboard companies are playing 4D chess tricking us into viewing their ads for free

[@samsmusichub]

It's crazy what you can find on the internet.

[@iAmGIG]

3:01 Interesting queries, hope there aren't any Internet exposed industrial systems.

[@dcquence]

spoilers, there are

[@lorenz3021]

there are alot some even let you change settings

[@Alfred-Neuman]

Install exe -> Default --> Next --> Next --> Next --> Finish 😃👍

[@LarsV62]

​@@dcquence And many SCADA systems (especially older ones) have hard coded usernames and passwords for administration, or they don't allow changing the one that was chosen on first install. Sucks if any such system controls vital infrastructure and use known hard coded login details...

[@ksrele]

I have one client who have mail server on shared hosting (the same IP is for more email domains) that I don't have access (I only have access to cPanel of his domain). I just want to know what other email domains are on that IP address because my client have problems: his IP gets to blacklist very often and then they can't send emails to some partners. His company is clear I know for sure. Some other company that have email domain on the same IP are making problems and I need to know who else is on that IP so that I can contact them and ask them to check their security or maybe someone is sending malicious emails. They are all in my country, maybe in the same town. But I don't want to call hosting company before I check this by myself.

[@Lazy2332]

5:12 cellco partnership is Verizon Wireless. Not entirely sure WHY they use Cellco instead of VZW but they do.

[@ValiantNomad]

Imagine looking at active cameras and randomly seeing someone through their webcam.. that would.. not be good.

[@RealMasterKush420]

Few years ago that was common. I used to wake up people while they were sleeping by screaming and then I would tell them to change the default password. Fun times

[@MASTERCRAFT938]

Very coool. I subscribed xD

[@RebrandSoon0000]

This is gold for sure. I'm sold.

[@Schweinmesser]

Thanks for sharing! I can see how easily you can go down the rabbit hole to find Alice.

[@abuctf]

Well, that is something that is left there forever.

[@iuse9646]

It is

[@V530-15ICR]

7:33 I think it is off because it is nighttime.

[@MAX-nv6yj]

What a fabulous video! I'm going to consider Censys for further analysis and exploration. It seems fun, interesting and helpful-thanks a lot! ❤

[@mrskunk4732]

My good friend does that with the 3D printers. He has them on a remote switch and he will run them while he is at work, so he can check on them remotely and if therer is an issue he can shut it down remotely.

[@xdcountry]

Big Tech meets Big Ick - I love it!!

[@JaapTamminga]

This is a problem, censys scans all ports on all IP address's every few hours. there are quite a few doing the same mostly from the USA and China. the load on the internet we pay for must be massive.

[@Iron_Condorr]

@ 4:08 Hold Ctrl then scroll your mouse wheel up or down to quickly zoom the page in or out. -

[@Alex2554]

So, that’s why I see that going on my website 1 times every week, it’s just scanning for changes!

[@JbVest]

God if I what's playing a drinking game for every time I heard "drill down into" I'd be dead 😂

[@So1]

It's always fun going through that site

[@oligarchytheatre777]

Takes me back 20-30 years ago 😊😊

[@ExtraYT311-hk4xd]

This site was part of a question in my CEH cert exam.

[@mason35715]

Have you taken the masters ?

[@valrach7303]

there are a lot of publicly accessable webcames in germany that just sit on houses and show you the enviornment

[@ofurious587]

Ive found multiple cameras from inside home with people just doing their thing on shodan, creepy af, also found controllable cameras through out some landmarks in rome.

[@null_value89]

John Hammond is the Barney of cybersecurity.

[@Eric-sm8pv]

lol this tickled me_no Diddy tho🤣

[@cameronrich2536]

You're his biggest fan

[@MatthewLoweHostedAccountants]

Dude , he isn't at all

[@avery581]

Barney, like the dinosaur? Can’t tell what you’re getting at.

[@Leadshot]

Is there a way to look at your own ip incase anything is leaked?

[@iuse9646]

Look up your up ip.

[@comosaycomosah]

unless you open ports youre gucci basically

[@charmquark0]

Inst it very similar to Shodan ?

[@BMOThebot]

I literally did this today with Finn. The synchronicity is real

[@CyberSquad-JoinTheSquad]

Love your content! And question what keyboard you are using?😂

[@hesmo_smm]

I am not sure but isn’t this something like shodan?

[@DT-hb3zu]

When i was taking my course in CEH, our instructor (big dude, with a big beard, and full sleeves) poked some Chinese routers that were open to the Internet. Illegal? I dunno. Funny. Hell yes

[@4TheRecord]

Once saw one of these videos of an old guy asleep on his sofa, think the camera was inside a TV. You're better off covering anything thats got a camera if you don't want others being able to see you. I have tape covering the camera on my laptop for the same reason. If you've got any webcams also unplug them when not using them. There are thousands of links online and through google that give access to all these cameras.

[@Deneteus]

In 1989, Nielsen considered a system that would include camera-like devices and computers attached to the top of TVs in households. The computers would be programmed with facial images of each family member, and the cameras would scan the room for faces when the TV was turned on. However, the New York Times reported that Nielsen said the system would not be in service for at least three years and that they are sensitive to privacy concerns.

[@DavidStringham]

@23:04 The title translates to something like "Blick on Castlecity."

[@ov3rtv654]

"I feel a little bit odd doing just the United States , I'll pivot to Canada" LMAO

[@H3cJP]

lol you made the stars of the repo skyrocket

[@robertlinke2666]

why isnt any of this behind a NAT/ private network and not routed on the public network?

[@actng]

a lot of stuff i looked up actually had a login page after the 200 so... kudos to them.

[@pnumenwiese]

Hey Mister! Was the generated query helpful? Do you ever klick on like or dislike buttons? And all the You Tube you are consuming, do you klick the like there? Just curious..

[@GilFrog60]

The webcam from ~ 22:56 is a public, the one from the roof

[@cavanmoriarty6370]

y’all remember that one site that would take u to a random persons public webcam?🤣

[@lunachocken]

16:42 his task bar briefly appears. Showing proton vpn, brave as well as the time 11:57 lol.

[@Bromon655]

Brave 🤢

[@gamingbud926]

@@Bromon655 What? Brave's the jam!

[@ChrisWijtmans]

@@gamingbud926 brave used to leak tor logs.

[@Bromon655]

@@gamingbud926 It's Chromium based

[@mcmaddie]

Imagine watching this video and then your own 3D printer camera pops up there.. *woops*.. luckily mine is off atm. ;)

[@planktonfun1]

I use it to check traffic, but the public cameras are pretty slow since everybody is using it

[@soniablanche5672]

I'm actually surprised these devices let you use their app without setting a password

[@CosmosKramer]

At 6:00, "how much of this can I show?" while displaying a whois registration record?! LOL... If there are varying degrees of public information, these records would rate as "extremely public," right behind "list of actors in a given movie."

[@platypus001]

this is cool. like the overpass turbo of the Internet. awesome

[@petertrevena804]

Love this and another great site 😊👍

[@darkstars101]

One of those billboards is literally 5 minutes from my house. What are the chances.

[@finhas8865]

Tho now it's seems weird, this is somehow how it used to be. Used to watch some random cctv from some random places in some random countries and wandering how people live over there. Not really something to be excited to.

[@hollywoodhank591]

Its like shodan right? Just gratis?

[@iwontlagback7236]

Its not free

[@jaygeeantonio]

what happened to wireshark,nmap and ettercap

[@AmCanTech]

How does this compare to shodan

[@zyxwvutsrqponmlkh]

This seems like a service that enables far more ill deeds than benevolent.

[@mikelinsi]

i would be interested on Tesla Supercharger if there are in public net?

[@oetken007]

If you do not configure it willingly, devices in your LAN are not accessible from the WAN. The most problematic devices are these, connected to a cloud, because you have no control over the interfaces. If the cloud is compromised, all devices are as well. If you use webcams, buy them from big brands like DLink, Panasonic, Mobotics, Hikvision.... Think twice where you want to place a webcam as well. Not in the bedroom etc...

[@januzi2]

There's a pretty cool song to play through the ip cameras: The Police - Every Breath You Take. It's the ultimate stalker's theme. Edit: Remember John, do not feed the monkeys.

[@maktiki]

No when they sleep start moaning, when they wake up stop and repeat every night.

[@pauljs75]

SauSarge and CharlieTheJanitor had classic content that did exactly that. Others pranks that were funny were also the smoke detector beep and getting some dog to randomly start barking. Eventually they lost their KZbin channels for that content after a TOS change, although I think one resumed on another differently named channel that is now notorious for making fun of gaming exploits. Now if you think they were entirely bad guys, they often ended the joking around by telling people to change the login and password. Often those cameras were completely open to the public. I wonder if anyone out there still managed to archive that content? I miss the garage webcam with "Let It Snow" playing, or the Rick Roll of a U of S.C. classroom. Those kind of had a mood, and the outcomes were good-natured at least.

[@januzi2]

@@pauljs75 Dwight? ;) I've liked the video from the automated house, in which the guy had the control over not only the cameras, but also the a/c system, the garage's door and other stuff. The heating system being turned on in the middle of the summer was the evilest thing I could imagine to see.

[@pauljs75]

@@januzi2 Was that the one where they spammed the "nuclear launch alert" soundboard thing?

[@januzi2]

@@pauljs75 The automated house? It was quiet, except for the owner that was being loud about getting "free sauna" treatment.

[@vladimirmorales4823]

They called me crazy but i knew i had to install a cctv and not a crappy smart camera

[@Salient-n7c]

What are some other Shodan like services out there?

[@Boo-qg9fj]

Zoomeye

[@affiliateanimalistic9607]

But you can search these from google right? I used to check these open ports for companies from google or was it some spoof? 😅

[@ReStoryIt]

What the heck I saw this yesterday before I saw this video The worst thing I found is that I found the airport camera you can control like making sounds and turning on leds

[@repairstudio4940]

Why not just use Shodan?

[@Darkregen9545]

Glad to of seen this and find out my ip is all good and no open service, port exposed to the public

[@calvinthedestroyer]

You should connect to new refrigerators and see what food people have.

[@Mario583a]

3:02 conllection

[@xylxylxylxyl]

I was surprised to see after looking into Censys that they're physically located in Ann Arbor. I lived in Ann Arbor for years :-O