5/17/2023 0 Comments Microseven![]() ![]() To not encrypt information such as passwords in transit is to my mind irresponsible regardless how trivial their use might be considered. Even the most mundane web information is now routinely encrypted between the user and a web site. Lastly, even if the user gives permission for the information to be revealed for a particular purpose, it should not pass over the Internet in plain text form. It should not be routinely and secretly sent to the camera’s manufacturer for an unknown purpose 6 times a minute. Second, even if the information might be needed for some purpose on the Internet at some point, it should be requested and the user permitted to decide if it should be sent. There is no need for the camera to have any dealings with any IP address beyond the LAN much less be passing this sort of information. ![]() The information that I was able to recognize included the Camera Type, the Camera ID (serial) Number, the User Name to access the camera, the Password to access the camera, and the camera’s PIN.įirst of all, I can see no need for the camera to send this information to anyone, so why is it being sent to a Microseven server? The camera is used only locally and any video that is retained is retained locally. The information that was in those packets each time, in plain readable text, was what I would consider privileged information. What I found is that every 10 seconds the camera was sending a packet on port 7007 to IP address 173.254.193.108,. ![]() I won’t bore you with the process but the end result of further examination was both surprising and disappointing. Since the camera was powered on, but not being used, I was curious why the camera would be contacting an IP address on the Internet. In trying to solve a network problem, I was examining packets with tcpdump on the local network when I noticed that there were packets routinely being exchanged between my Microseven M7B77-WPS security camera and an IP address on the Internet. ![]()
0 Comments
Leave a Reply. |