New answers tagged

0

Not to nitpick, but it sounds as though you're interested in honeypots/honeynets in general. There are several honeypot solutions available. The aforementioned are open source and easily accessible, documented and will aid you in your projects. Also, the honeynet project brought you Quebek but has several honeypots that are based off of bochs/qemu.


0

Yes. It's possible to fingerprint clients in this way. There are even some existing tools that implement this. However, it appears to not be very accurate. It might be able to recognize a major browser type (e.g., Firefox, Chrome, Safari), but it's unlikely to be able to accurately identify the version number, and any fingerprints obtained in this way ...


0

Keep these things in mind: How does it wirelessly connect to the internet ? WEP should be fine if you are only concerned about remote hackers, but still is considered generally insecure. Think about this: If the camera's wifi security is outdated (WPA and WPA2 have been around for a long time), what else will be insecure? What kind of authentication does ...


3

Some very specific suggestions: A device that is not accessible via the internet is going to limit the physical range of threats. Wired, RF, or even bluetooth based devices will likely fall into this category. If you do use a WiFi based monitor, make sure your home wireless network is secured at a basic best practice level, and that the monitor supports ...


4

The problem here is that most people who buy baby monitors plan on using them in their home, and most people don't do top secret stuff in their home - they reserve that for their corporate office or government agency type stuff. I also wouldn't recommend wireless security cameras either because they're seen as a low cost alternative to wired, mostly used in ...


4

The most common things are default configuration and outdated software. So, in order to be safe, first be sure that you are using the latest software provided by the vendor. Then change the default configuration. This include users and passwords, ports and any other relevant option you see. Finally, be smart. Don't allow external traffic to that device if ...


0

Yes, you can perform some fingerprinting of SSL traffic. Although you may find fingerprinting a client hard as most of them will be using one of the common libraries such as openssl. So you may be able to fingerprint different versions of these libraries as opposed to curl vs firefox vs wget.


23

Preface: I consider this question to be a false dichotomy and an inversion of the burden of proof. One of the core tenets of building secure systems is that you minimise the attack surface, and resist additional components and features wherever possible to keep in line with this. As such, if one cannot identify a strong reason to include a component in the ...



Top 50 recent answers are included