I saw this on the Register and forgot to post about it a couple weeks ago. It’s somewhat related to my post on Google exposing Snort installs. They point out how easy it is to find the web interfaces to IP enabled video cameras on the web. Search Google for “inurl:CgiStart?page=Single” or “axis inurl:view/index.shtml” and see for yourself. I looked at a couple and they seem to be purposely left on. It reminds me of the old PictureTel devices, now Polycom. You could connec to to the PictureTel main office’s device to see if yours was working correctly. I remember having lunch in the board room and we were watching a PictureTel employee surf the web with our device looking over his shoulder…somewhat amusing.
It really is concerning what might end up in a Search Engine cache based on what has happened so far. Fast forward a few years, will people be able to see the contents of my IP enabled refrigerator because the vendor forgot to put a password or robots.txt file on the device’s web server??
–Chris
Technorati Tags: Google, IP camera, PictureTel, Polycom
Leave a Reply