@D3C4FF morning ;) dropped you some answer to your CCTV questions... I'm on my first coffee mind you, so if you think I messed it up, drop me a note here. :)
Is there any way that an attacker can identify if a CCTV camera is on/operational without direct physical access to the cable/camera
If it is on, is there any way an attacker can tell if its being viewed/recorded or not with access to the camera/cables but no access to the recording/viewing roo...
@TildalWave @D3C4FF I do like the question, it's fun and exciting. I just don't think it's a good fit here. Tons of types of cameras, tons of models for each type, and tons of installation-specific settings for each model. It's a good question, but it's bad for Sec.SE
@TildalWave I'm now actually reminded of your balls-licking outburst, remember? You already think it's too broad, yet you didn't cast your vote.
@Adnan yup NaRQ would make more sense, I was just confused with the choice... maybe you were thinking "close - circuit" ... hmmm "too localized" ? :))
i know, it was early morning :)
@Adnan no I said maybe... and since @D3C4FF is often here, we can ask him easily to add stuff to the question
@Adnan and it wasn't "outburst" I'm still equally partial to that question as I always was... my VTC on it is there since when I also posted that "answer"
just to be clear - that's from before the top rated answer on it
I'm currently developing a web application using Node.js (server-side JavaScript) and MongoDB (NoSQL database).
I'm at the stage where I have to design the authentication and I had a question about asynchronous programming.
One of the advantages of using Node.js is that everything can be progra...
@Adnan There are a few different types of cameras, but not that many, there's CCD/CMOS, CCTV(coax)/IP(cat5e), IR LED enabled/not present, ones with LED's/No LED's
All the cameras are more or less variations of eachother, the same as computers... More or less the same all the time, any wierd vulnerabilities that anyone knows of can be pointed out and maybe i can adapt that towards future attacks
@Adnan as a side note, I have a pretty good understanding of physical security stuff already, but i like getting extra ideas input from people here, @TildalWave's idea regarding watching wireless camera's network bandwidth was an excellent idea and one i'll have to try in the future :)
@AviD you'd hope, but then if people really have been sending him messages about uninstalling the software for 15 years it does imply a lack of intelligence in some people :)
@AviD no but insane + money = eccentric which is always ok.
@D3C4FF I already know that. It's obvious from your answers and questions, but that's not the point. This question specifically, I don't think it fits here. Whether it's good or not in general is irrelevant.
@D3C4FF oh cool :) and also nice that it was posted as a separate thread, so it fits with Q&A better here... good answer also. IIRC you'd get slightly better results with green lasers than with the red ones due to the light frequency they produce, but I don't think it matters that much (the intensity is what prolly counts a lot more)
@TildalWave Yeah obviously the power has something to do with it, but actually the lens had a lot as well, if its super wide, it works less effectively, if its tele, it'll work better. If you want to distract the camera you simply need to shine it as your moving around, to do permanent damage you need 3+Watts and to have it focused for a length of time (Depends on lens/ccd/etc)
@TildalWave there's a security shop that i came across once that sold CCTV cameras, and as an ad they had about 20 cameras set up around their shop front, Its been on my todo list for ages to go buy a stack of really cheap red laser pointers and the same number of tripods and aim them all at their system, then slipping cat pictures under their door :P THEY'LL NEVER KNOW
@D3C4FF Oh sure the camera's lense will diffract the light ... you have to account for lense elements, focal point,... you name it. Tho I'm pretty sure a 5W white/green laser will completely fry all current CMOS/CCD sensors, maybe even 2.5-3W ones
@D3C4FF if you know exactly what type of process the sensor was built on, you could then adjust with your laser shopping :) but white/green will obviously give the best power in the visual spectrum, something the sensors were built for
@TildalWave Yeah, if you had the time for a proper lengthy engagement, you'd scope out the system before hand, figure out the exact makes and models of the cameras, purchase them yourself and test them in the lab to determine all the characteristics, that's what we've done in the past and its worked pretty well :)
I am developing an open source software. This software generates content that is sent to a server for publishing. Anyone can get this software and generate content.
The API for publishing at the server is also public. (Can be changed if necessary).
Is there a way I can make sure the content was...
@D3C4FF yes these are pretty frequently used here... watch it tho, some might have pretty good light filters on them too, limiting your options with lasers. Even the polarizer filter will render it less effective ;)
A lot of them wouldn't have a screen wiper but a rolled thin transparent screen that the motor moves back and forth constantly, wiping the screen in the process
You could probably put up a normal webcam and be fine with the weather conditions for months on end... not here. Sure it's sunny and hot now, but I bet there's gonna be a storm due to it tonight or by tomorrow
@D3C4FF Hopefully my answer to your meta question is a little more informative than Rory's. His was ok, but I felt was lacking in critical details. He probably wrote that from his phone.
@ScottPack I kinda didn't get it until I read your last sentence about removing the dreaded "T"... That's a good point, possibly that best that can be said in a single sentence that I've heard of.
Many modern cars feature Bluetooth connections and USB ports that allow passengers to connect them with mobile phones and digital music players (and smartphones, which serve as both). Is it safe to use these features in rental cars? Could data on the device be stolen? Could the devices themselves...
What are the security risks of Bluetooth and what technologies and best practices should be used to protect my device? What can an attacker do once a malicious device is paired with mine?
Specifically
Is it a good idea to remove & re-pair my devices on a set interval (thinking that this is ch...
I have a security related question about storing some client information - specifically their database login credentials.
My app works based on the client and so the database details need to be set at the start. My initial thought was to hold it all in a MYSQL database table but if that gets com...
@Adnan You bring up an interesting point though. I have seen closed questions on other sites pointing to multiple dupes. I don't think I seen one over here. How does that work?
@Xander Is a rental/kiosk more likely to have been compromised than a "factory fresh" system? Certainly. However, is it inherently more susceptible to compromise? Not really.
@Iszi I don't see that as an assumption. It's a given that a far greater number of individuals have access to a rental car, and many of those individuals have no vested interest in your experience with that car. That creates more attack opportunities and less pressure to conform, which intrinsically raises the level of risk without having to assume the trustworthiness of any single individual in either system.
@Xander Yes, but the system could just as easily have been exploited at the factory or dealership. Again, it's more likely that it would be done on a kiosk or rental, but still just as easily done on any system.
@Xander Huh. I have a 11", my friend has a 13" Air and another friend has a 15" Pro. Can't say I noticed any difference. Not really that picky though. :P
But I wish I could afford to upgrade my 2010 Air to the latest Haswell ones. :( 2GB of RAM is getting a little stupid now.
@TerryChia Yeah, rough measurements from the image show that the bottom row of keys are all taller by a couple of pixels, the arrow keys are bigger, the function keys are bigger, and there appears to be an extra pixel's worth of spacing between the rows. Can't say exactly though.
@D3C4FF A sensor would fire a signal, a basic IC would take that signal and fire some signal to the computer. In my inexperienced opinion, I thought that a keyboard signal is the easiest. What do you think?
@Adnan I work from home in the suburbs, so for me it's not too different than any other suburb. Downtown though I do see plenty of skinny jeans and food carts everywhere. Oh and our old neighbors actually did have a pair of chickens...
@TidalWave just found out my dad still had a limited edition Duvel triple hop from 2010 in his cabinet, apparently it will go bad next month. Now poor old me will have to drink it
Is there any way that an attacker can identify if a CCTV camera is on/operational without direct physical access to the cable/camera
If it is on, is there any way an attacker can tell if its being viewed/recorded or not with access to the camera/cables but no access to the recording/viewing roo...
I'm currently developing a web application using Node.js (server-side JavaScript) and MongoDB (NoSQL database).
I'm at the stage where I have to design the authentication and I had a question about asynchronous programming.
One of the advantages of using Node.js is that everything can be progra...
I am developing an open source software. This software generates content that is sent to a server for publishing. Anyone can get this software and generate content.
The API for publishing at the server is also public. (Can be changed if necessary).
Is there a way I can make sure the content was...
What are the security risks of Bluetooth and what technologies and best practices should be used to protect my device? What can an attacker do once a malicious device is paired with mine?
Specifically
Is it a good idea to remove & re-pair my devices on a set interval (thinking that this is ch...
Is it bad to make a new password similar to an old one? For example if one followed some sort of pattern such as adding more numbers inbetween words.
