Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > chi.internet > #3100

Re: IoT

Show all headers | View raw

Mark Anderson <mea@nospambradnylion.com> wrote:
> In article bje@ripco.com says...
>> My guess is that camera was probably doing it from day 1 and you didn't
>> notice until now. 
> 
> I know the exact time it started two days ago.  My system monitors all 
> traffic from all devices.  I even have raw pcap logs I could show you.  
> One of the features of my system is that it catches bots and it has 
> caught many over the years all from infected Windows PCs.  People don't 
> haul around laptops anymore so most all traffic is from phones and 
> tablets and some Mac Airs so I haven't had a bot show up in over a year.  
> BTW: Apples and androids are about 50/50 and I rarely see a blackberry 
> anymore.  Poor blackberry.
> 
>> Whenever they start writing software into hardware they
>> have to come up with some long term solution for minor issues like, is this
>> thing still on the internet? If they put in the web address of the company
>> that made it into the firmware to ping or try to connect to, the problem
>> there is they might be out of business in 6 months.
> 
> It's possible an internal timer went off telling it to phone home.  It 
> got an address on its first DNS lookup and then it couldn't UDP out nor 
> could it get a binary data blob through on port 80 using invalid http.  
> Had they simply did a valid http GET to home base they could have 
> downloaded a software image no problem.  This tomfoolery baffles me if 
> what they're doing is legit.   That kind of software upgrade is a good 
> way to brick a lot of customer devices which would probably be more 
> liability than whatever they could gain from it.
> 
> I set a valid gateway address in the camera because I wondered what kind 
> of comms it would do and it has been completely silent since I installed 
> it mid February.  My other camera hasn't sent a single packet to the 
> Intertubes but that's an older model.

These are gems:

raw pcap logs
internal timer
couldn't UDP out
binary data blob

Back to chi.internet | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Re: IoT Cydrome Leader <presence@MUNGEpanix.com> - 2015-06-03 21:11 +0000
  Re: IoT Mark Anderson <mea@nospambradnylion.com> - 2015-06-03 18:55 -0400
    Re: IoT Bruce Esquibel <bje@ripco.com> - 2015-06-04 11:01 +0000
      Re: IoT Mark Anderson <mea@nospambradnylion.com> - 2015-06-04 14:49 -0400
        Re: IoT Bruce Esquibel <bje@ripco.com> - 2015-06-05 12:02 +0000
          Re: IoT Mark Anderson <mea@nospambradnylion.com> - 2015-06-05 13:54 -0400
            Re: IoT Cydrome Leader <presence@MUNGEpanix.com> - 2015-06-05 18:07 +0000
              Re: IoT Mark Anderson <mea@nospambradnylion.com> - 2015-06-05 14:10 -0400
              Re: IoT smr <me@shawnritchie.com> - 2015-06-05 13:13 -0500
                Re: IoT smr <me@shawnritchie.com> - 2015-06-05 19:34 -0500
                Re: IoT Mark Anderson <mea@nospambradnylion.com> - 2015-06-05 22:37 -0400
                Re: IoT Geoff Gass <glg@tanzenmb.com> - 2015-06-06 04:43 +0000
                Re: IoT Cydrome Leader <presence@MUNGEpanix.com> - 2015-06-08 16:55 +0000
                Re: IoT smr <me@shawnritchie.com> - 2015-06-08 14:14 -0500
                Re: IoT smr <me@shawnritchie.com> - 2015-06-06 15:02 -0500
                Re: IoT Cydrome Leader <presence@MUNGEpanix.com> - 2015-06-08 16:57 +0000
                Re: IoT smr <me@shawnritchie.com> - 2015-06-08 16:16 -0500
                Re: IoT Cydrome Leader <presence@MUNGEpanix.com> - 2015-06-09 21:58 +0000
                Re: IoT Mark Anderson <mea@nospambradnylion.com> - 2015-06-09 18:48 -0400
    Re: IoT Cydrome Leader <presence@MUNGEpanix.com> - 2015-06-04 19:16 +0000
      Re: IoT Mark Anderson <mea@nospambradnylion.com> - 2015-06-04 15:50 -0400
        Re: IoT Mark Anderson <mea@nospambradnylion.com> - 2015-06-04 19:18 -0400
          Re: IoT Cydrome Leader <presence@MUNGEpanix.com> - 2015-06-04 23:47 +0000
            Re: IoT Mark Anderson <mea@nospambradnylion.com> - 2015-06-05 14:07 -0400

csiph-web