vice.com/en/article/y3pnkw/…

schneier.com/blog/archives/2022/09/…

@forest We basically bought and developed TIA

and our government probably doesn't need private data vacuuming

TIA ( en.wikipedia.org/wiki/Total_Information_Awareness )

@forest wasnt aware NSA could bypass TLS yet ... figured they where just archiving it all waiting for Quant

How do people know it's not some other hacker?

I see lots of tweets confirming that it's the guy, but not sure what they're basing that on

Totally unrelated: Does anyone know why the guy claiming to have hacked thousands of Iranian cameras mentioned CVE-2018-9999?

CVE-2018-9999 doesn't seem to lead to any way of taking over a device

I've only found out it's a xss, so I have no idea how bad it is... maybe it tricked the admin on running some external script that took over the device?

But if it relies on tricking an admin, that's not a simple thing to just take over several thousand devices

If you have to rely on user interaction, you'd have to attack 10,000 admins or something just to get 1000 devices (unless you're some sort of social engineering genius)

Somebody else suggested that the cameras were just exposing RTSP publicly, and the "hack" was a simple scan to find all the unsecured feeds