How Shodan takes screenshots from some webcam even if this webcam (IP adress) requires login?
And how can I protect this? I can't have some thing on LAN network, because I need to join to it from far away location.
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this communityHow Shodan takes screenshots from some webcam even if this webcam (IP adress) requires login?
And how can I protect this? I can't have some thing on LAN network, because I need to join to it from far away location.
We do not try to authenticate with webcams at all - not even using default credentials. We are only able to grab an image if the device has no authentication enabled and is public on the Internet.
Source: I wrote the code.
If you've read about using Shodan to find and view people's webcams / IP cameras they are probably talking about people who have left the default username and password on their camera's web interface, which is very common - common enough that there are a lot of them on the internet.
The below article gives an overview of the default usernames and passwords - changing these (or just the password) is the first and most important step towards ensuring someone can't randomly view your webcam. Also make sure that authentication is turned on, if it can be switched on or off.
I don't know if this is the best article and video about it but it does seem to explain how it works.