Security flaws let anyone snoop on Guardzilla smart camera video recordings

guest · Dec 27, 2018

Security flaws let anyone snoop on Guardzilla smart camera video recordings
December 27, 2018
https://techcrunch.com/2018/12/27/guardzilla-security-camera-flaws/

The researchers at 0DayAllDay found that Guardzilla’s top-selling indoor wireless security system contains a set of hardcoded keys that can be easily extracted, because the device’s root password was protected using a decade-old algorithm that’s nowadays easily crackable.
Each device uses the same set of keys to upload video recordings to the company’s Amazon Web Services’ storage servers. Anyone can use these keys to log in and gain full access to the company’s cloud storage — and customer data uploaded from the device.

The team of five researchers said in their report that it took two off-the-shelf consumer graphics cards just three hours to decrypt the eight-letter password protecting the affected Guardzilla device’s firmware that ships with each device.

“They could update the keys and update the firmware, but that just means they’ll be rediscovered again by the same techniques,” said Beardsley. “The only way I can think of to fix this completely is to change the keys, stand up a proxying service and update the firmware to use this proxying service with unique-per-device accounts.”
Click to expand...

Log in or Sign up

Security flaws let anyone snoop on Guardzilla smart camera video recordings

guest Guest

Log in or Sign up

Security flaws let anyone snoop on Guardzilla smart camera video recordings

guest Guest

Useful Searches