I am standing on the corner of Harris Road and Young Street outside of the Crossroads Business Park in Bakersfield, California, looking up at a Flock surveillance camera bolted high above a traffic signal. On my phone, I am watching myself in real time as the camera records and livestreams me—without any password or login—to the open internet. I wander into the intersection, stare at the camera and wave. On the livestream, I can see myself clearly. Hundreds of miles away, my colleagues are remotely watching me too through the exposed feed.
Flock left livestreams and administrator control panels for at least 60 of its AI-enabled Condor cameras around the country exposed to the open internet, where anyone could watch them, download 30 days worth of video archive, and change settings, see log files, and run diagnostics.
Archive: http://archive.today/IWMKe
I was living in a 10th story penthouse apartment as a new building started beside us. The contractor put a webcam high up on the structure so people could watch construction live on a website. They left the control panel fully exposed so all you had to do was find the IP address of the camera and boom, you had full control. I would point it directly at my apartment’s window and wave, or my friends would do silly shit. Every morning the cam would be reset, but they never actually secured it. That’s when I realized how fucked we were, 20 years ago.
I wouldn’t be surprised if it got found by Shodan, which scans the entire internet, indexes it and is easily searchable.
There’s actually quite a few open webcams on the internet that shouldn’t be.
https://github.com/00xNetrunner/Shodan_Cheet-Sheet