Ke kamaʻilio nei kekahi ma o kāu nānā ʻana i kāu pēpē a i ʻole ke kiʻi paʻi kiʻi kiʻi: Paʻa koke a hoʻokaʻawale i ka Pūnaewele¶

ʻO ka lohe ʻana i ka leo o kahi malihini e kamaʻilio ana ma o ka mea nānā pēpē Wi-Fi a kāu keiki (Nanit, Owlet, Eufy, VTech, Lollipop, Motorola), e nānā ana i loko Ring, Wyze, Arlo, Blink, Google Nest, a i ʻole TP-Link Tapo ʻO nā lens pan-a-tilt kaʻa pahupaʻikiʻi e ʻōniʻoniʻo ma luna o kou lumi moe nona iho, me ka ʻike ʻana i ke kūlana polū/ʻulaʻula o ke kāmela e hoʻomālamalama ana ma 2:00 AM, a i ʻole e ʻike i kāu Ecobee / Nest ʻO ka thermostat akamai i 32 degere Celsius (90 degere Fahrenheit) he hoʻouka weliweli i kou home. Eia nō naʻe, inā ʻaʻole he kanaka ʻē ma waho o kou mau puka, ** ʻaneʻane maʻa mau kēia i kahi moʻokāki kapuaʻi mamao a i ʻole ka mea hoʻokele port-forward intrusion ma mua o ke kū ʻana ma waho o kou pukaaniani**. Ma luna o 90 pakeneka o ka ʻaihue pahupaʻikiʻi leo ʻelua ʻaoʻao e hana ʻia ma kekahi o nā ala ʻelua: (1) Automated Credential Stuffing (kahi e lawe ai ka poʻe lawehala i ka leka uila kahiko a me ka ʻōlelo huna āu i hoʻohana hou ai ma kahi kahua kūʻai haʻihaʻi a hānai iā ia i loko o ka bot e komo i kāu Ring, Wyze, Nest, a i ʻole ka polokalamu kapuaʻi kiaʻi pēpē mai nā kaukani kilomika mai ka mamao aku), a i ʻole (2) Direct Local IP / UPnP Port Forwarding Exposure (kahi i hoʻopaʻa ʻole ʻia kahi pahupaʻikiʻi IP generic a i ʻole ka mea hoʻopaʻa wikiō pūnaewele. NVR hoʻohana ʻia UPnP e wehe i ke awa 554 RTSP, 80, a i ʻole 8000 pololei ma ka punaewele lehulehu a ua kuhikuhi ʻia e ka Shodan.io ʻenekini huli). No ka paʻakikī o ka mea hoʻolale home ākea, e kūkākūkā pū ka hoʻopaʻa ʻana i nā mea hoʻokele home a me nā mea IoT; inā manaʻo ʻoe e hoʻomalu ana kekahi hoa hana mua a i ʻole ka mea hoʻomāinoino i kou home holoʻokoʻa a me nā kukui, ʻike ʻO ka hack home akamai, ka hijacking kamera, a me ka stalkerware; a i ʻole inā paʻi ʻia kāu hāmeʻa mālama NAS ma ka ʻaoʻao o kāu mau kāmera, e nānā ka hale a i ʻole ke keʻena liʻiliʻi NAS a me UPnP pani. Inā lohe ʻoe i nā kapuaʻi kino, ʻike i kekahi ma kāu waiwai, a i ʻole makaʻu no ka palekana kino koke o kou ʻohana, e kelepona i kāu helu ulia pōpilikia (911 ma ʻAmelika Hui Pū ʻIa a me Kanada, 112 ma waena o ka European Union, 999 ma United Kingdom) i kēia manawa a i ʻole e nīnau i kā mākou papa kuhikuhi honua o helu pilikia.

E hana i kēia i kēia manawa¶

1. E wehe kino i ke kaula mana mai ke kua o ke kia pepeke a i ʻole ka pahupaʻikiʻi o loko (a huki i waho i kekahi pākaukau hoʻihoʻi kūloko) i loko o 5 kekona:
2. Mai ** ʻaʻole ** hoʻopau manawa i ka wehe ʻana i ka polokalamu kelepona no ka hoʻohuli ʻana i ke kāmela "Off" i ka lako polokalamu - hiki i ka mea hoʻouka kaua nona ka mana hoʻomalu o ka waihona kapuaʻi ke hoʻololi hou i ka polokalamu "Privacy Mode" i ka 1 kekona, a ke hoʻomau nei kekahi mau kāmela i hoʻopaʻa ʻia i ke kahe leo ʻoiai ke hōʻike nei ka app i ka hoʻomaha wikiō. Huki koke i ka pahu pā kino a i ʻole ke kaula mana USB-C mai ke pahupaʻikiʻi.
3. E nānā i kēlā me kēia pahupaʻikiʻi Wi-Fi i loko o kou lumi moe, kahu hānai, a me nā wahi noho a wehe pū iā lākou. (E haʻalele i nā pahupaʻi puka waho/bele puka i hoʻopili ʻia wale ma hope o kou nānā ʻana inā aia kekahi ma waho o kou home.)
4. **Mai paʻi i ke pihi pinhole "Factory Reset" ma ka pahupaʻikiʻi a i ʻole e hoʻomaka hou i kāu kelepona Wi-Fi **:
5. Ke kaomi ʻana i ka Factory Reset ma ke kāmela a i ʻole ka wehe ʻana i kāu kelepona Wi-Fi home ** holoi i nā moʻolelo RAM maʻalahi (DHCP leases, UPnP port mappings, NAT connection tables, a me nā kiʻi hanana hanana kapua hou)** e hōʻike ana i ka helu IP o ka mea hoʻouka kaua, ka hōʻailona manawa komo, a inā paha i komo ka mea hoʻouka ma kāu moʻokāki kapua a ma o kāu pūnaewele Wi-Fi kūloko.
6. Wehe i ka polokalamu kelepona o kāu pahupaʻikiʻi (Ring, Wyze, Nanit, Eufy, Arlo, Nest / Google Home) a lawe i nā kiʻi paʻi kiʻi o "Nā Mea Hoʻokaʻawale / Logged-In" a me "Nā mea hoʻohana i kaʻana like" ma mua o ka hoʻopau ʻana iā lākou:
7. E nana i lalo Account Settings -> Authorized Client Devices / Login Activity / Shared Users. Kiʻi paʻi kiʻi i kēlā me kēia kumu hoʻohālike (iPhone 15, Web Browser - Chrome on Windows, Android Emulator), wahi a me ka hōʻike manawa no kāu hōʻike mākaʻi.
8. E kaomi koke i ka ** Wehe / Haʻalele i nā mea āpau **, wehe i nā mea ʻike ʻole ʻia ** Shared / Guest Users **, hoʻololi i kāu ʻōlelo huna i kahi ʻōlelo huna hou 16+ ʻano hou, a hoʻā i ka Two-Factor Authentication (2FA) me ka hoʻohana ʻana i ka Authenticator App (ʻaʻole loa SMS a leka uila inā kākoʻo ʻia kahi app).
9. E nānā inā he mea nānā lekiō ʻole ʻo Wi-Fi kāu pēpē (FHSS 2.4 GHz a i ʻole DECT 900 MHz) me kahi Wi-Fi Cloud Monitor:
10. Ka ʻokoʻa palekana kino koʻikoʻi: Inā **ʻaʻohe Wi-Fi a ʻaʻohe polokalamu kelepona ** (he pale makua paʻa lima wale nō a me kahi pahu pahu e hoʻohana ana. 2.4 GHz FHSS a i ʻole lekiō analog), ** ʻaʻole hiki ke hoʻopaʻa ʻia ma ka pūnaewele . Loaʻa ka leo ma o ka lekiō ʻole Wi-Fi mai loko mai o 90 a 300 mika (300 a 1,000 kapuaʻi) o kou home - a i ʻole ke kamaʻilio kaʻa ʻole mai ke kamaʻilio pēpē a ka hoalauna ma ke kaila alapine like, a i ʻole kekahi i paka ma waho me kahi mea hoʻolele lekiō. Inā kamaʻilio pololei ka leo i kāu keiki ma ka lekiō ʻole Wi-Fi, ** e laka i kou mau puka a kāhea aku i nā mākaʻi pilikia (911 / 999 / 112) koke.
11. E ʻeʻe i loko o kāu Alaula Wi-Fi Home (192.168.1.1 a i ʻole 192.168.0.1) a hoʻopio UPnP (Universal Plug and Play) a holoi i nā mea ʻike ʻole ʻia Port Forwarding lula:
12. Nā kiʻi paʻi kiʻi P2P kūʻai keʻokeʻo (VStarcam, Foscam, Tenvis, Hikvision, Dahua, CamHi) hoʻohana UPnP e kuʻi mālie i nā awa hāmama (554, 80, 8000, 37777) ma kāu pākuʻi ala ala no laila e hele kekahi Shodan.io hiki ke nānā a kamaʻilio ma o ka pahupaʻikiʻi me ka ʻole o kāu ʻōlelo huna Wi-Fi.
13. E hoʻoneʻe i nā pahupaʻikiʻi, nā kiaʻi pēpē, nā thermostats akamai, a me nā mea haʻi'ōlelo akamai mai kāu Wi-Fi home mua a ma kahi kaʻawale. Guest Wi-Fi Network (a i ʻole i hoʻolaʻa ʻia IoT VLAN me Client Isolation hoʻohana ʻia):
14. ʻOiai inā loaʻa i kahi plug akamai, robot vacuum, a i ʻole ka nānā ʻana i nā pēpē i kahi nāwaliwali o ke ao i ka wā e hiki mai ana, ʻo ka hoʻokaʻawale ʻana iā ia ma kahi Wi-Fi VLAN malihini e pale ai i ka mea i hoʻopaʻa ʻia mai ka nānā ʻana a i ʻole ka hoʻouka ʻana i kāu kamepiula hana, kelepona, a i ʻole ka hoʻokele NAS home.

lāʻau hoʻoholo: pane koke i ka wā e kamaʻilio ai kahi malihini a neʻe paha i kahi pahu pahu home¶

E hahai i kēia lāʻau hoʻoholo i loko o nā minuke 2 mua o ka hanana e loiloi i ka palekana kino, mālama i nā hōʻike, a laka i ka mea komo:

flowchart TD
    Start["Lohe ʻia ka leo o ka malihini ma o ka Baby Monitor / Smart Camera, a i ʻole nā Lens Camera i hoʻoneʻe ʻia iā ia iho"] --> UnplugNow["KANAWAI 1 (0 a i ka 5 kekona): Wehe kino i ke kaula uila (a Wehe i ka Bati) mai ke pahupaʻikiʻi koke."]

    UnplugNow --> MonitorType{"Hoʻopili anei kēia Monitor i ka Wi-Fi / Smartphone App, a i ʻole he mea hoʻolaʻa lekiō kūloko kūloko (ʻaʻohe Wi-Fi)?"}

    MonitorType -->|"ʻAʻohe Wi-Fi / ʻAʻohe App (Dedicated 2.4 GHz FHSS a i ʻole Analog Parent Screen)"| RadioAlert["PALAPALA PALAPALA: Hoʻomaka ʻia ka hōʻailona ma loko o 90 a 300 mau mika (300 a 1,000 kapuaʻi) o kou Home."]
    RadioAlert --> TalkDirect{"Ua ʻōlelo pololei anei ka leo i kou lumi/keiki, a i ʻole ke kani ʻana e like me ke kamaʻāina ʻole/CB Cross-Talk?"}
    TalkDirect -->|"ʻŌlelo pololei / ʻino"| CallPoliceNow["E laka koke i nā puka a me nā puka makani a kāhea iā 911 / 999 / 112 no ka nānā ʻana i nā mākaʻi o waho."]
    TalkDirect -->|"Pōkole Neighbor / Walkie-Talkie Cross-Talk"| RePairChannel["Hoʻohui hou i ka ʻāpana makua a me ke kāmela e hoʻololi i ka FHSS Hopping Seed a i ʻole e hoʻololi iā DECT 6.0Encrypted Monitor"]

    MonitorType -->|"Kāmeʻa Wi-Fi / Cloud App (Ring, Wyze, Nanit, Eufy, Nest, Arlo, Generic RTSP)"| CloudVsLocal{"Pehea i hiki ai ka mea komo i ka pahupaʻiwikiō?"}

    CloudVsLocal -->|"Vector A: Hoʻopaʻa ʻia ʻo Cloud Account Credential Stuffing (90% o Ring / Wyze / Nest / Nanit Cases)"| CloudLockdown["1. Kiʻi kiʻi kiʻi i ʻae ʻia i nā mea hana a me ka mōʻaukala hanana i loko o ka App -> 2. Hoʻopau i nā kau āpau -> 3. Hoʻihoʻi hou i ka ʻōlelo huna + E hoʻā i ka Authenticator 2FA"]

    CloudVsLocal -->|"Vector B: UPnP / Port Forward / Shodan Direct IP Stream (Generic ONVIF / RTSP / Foscam / Hikvision)"| RouterLockdown["1. Kiʻi kiʻi ʻōkuhi UPnP & Port Forward Table -> 2. Hoʻopau i ka UPnP & Holoi i nā Port Forwards -> 3. Hoʻopaʻa i ke kiʻi kiʻi kiʻi WAN ma ka pā ahi."]

    CloudVsLocal -->|"Vector C: Hoa Mamua / malihini hale ma mua / mooolelo o ka hale"| SharedLockdown["1. Hoʻoponopono i nā 'mea hoʻohana i kaʻana like / nā lālā o ka hale' ma ka App -> 2. Hoʻololi i ka SSID Wi-Fi & WPA2/WPA3 ʻōlelo huna -> 3. Hoʻonohonoho hou a hoʻopaʻa hou i ka pahupaʻikiʻi i kahi moʻokāki hou"]

    CloudLockdown --> VLANIsolate["KaʻAnuʻu hope: E hana i kahi malihini kipa / IoT Wi-Fi Network (Client Isolation ON) a hoʻohui hou i nā mea pono i hoʻopaʻa ʻia."]
    RouterLockdown --> VLANIsolate
    SharedLockdown --> VLANIsolate

Māhele 1: E ʻike i ke komo ʻana o ka mea hoʻouka i kāu pahupaʻikiʻi a i ʻole ka thermostat¶

Ma mua o kou hoʻoponopono hou ʻana i kekahi mea, e hoʻoholo i ka ** ala komo komo ʻehā ** i hoʻohana ʻia e ka mea hoʻouka. Hōʻike kēia iā ʻoe inā loaʻa i ka mea hoʻouka ke komo i hoʻokahi polokalamu kāmeʻa kapuaʻi a i ʻole i hoʻopaʻa ʻia kāu pūnaewele Wi-Fi home holoʻokoʻa.

Māhele 2: E mālama i nā hōʻike ma mua o kou hoʻoponopono hou ʻana (Nā minuke 2 a 15)¶

Inā kamaʻilio kekahi malihini i kāu keiki, hoʻopilikia i kou ʻohana, a mākaʻikaʻi paha ma kahi lumi moe, ʻo ia ka hana he hewa kamepiula hewa a me ka uhai ʻana. E kali i 10 mau minuke no ka hopu ʻana i kēia mau ʻāpana ʻehā o ka hōʻike kikohoʻe ma mua o ka holoi ʻana a i ʻole ka holoi ʻana i nā moʻokāki, no ka mea ke holoi ʻoe i kahi hāmeʻa mai kāu app cloud, hoʻomaʻemaʻe pinepine nā kikowaena kapuaʻi o ka mea kūʻai aku i nā moʻolelo hanana a me nā wikiō e pili ana:

1. **E hoʻoiho koke i ka wikiō/leo mai ka Timeline Cloud o ka Camera **:
2. ʻO ka hapa nui o nā kāmeʻa hoʻopaʻa hoʻopaʻa ʻia (Ring, Nest Aware, Wyze Cam Plus, Nanit, Arlo, Eufy) hoʻopaʻa i kāna huaʻōlelo ponoʻī a me ka pane o ka lumi ke kamaʻilio ʻelua ala (Live View) ua ho'ā.
3. E wehe i ka laina manawa mōʻaukala hanana ma ka app no ka minuke pololei āu i lohe ai i ka leo, ** hoʻoiho i ka .mp4 paʻi i ka ʻōwili pahupaʻikiʻi kūloko o kāu kelepona**, a hoʻopaʻa pū i ka pale i ka laina manawa hanana e hōʻike ana i ka hōʻailona manawa pololei (HH:MM:SS me ka palena manawa).
4. **Paʻi kiʻi i ka papa inoa "nā mea hoʻohana i ʻae ʻia" a me ka papa inoa "nā mea hoʻohana i kaʻana ʻia" **:
5. Ma ke kani: Menu (≡) -> Control Center -> Authorized Client Devices A ME Shared Users.
6. Ma Wyze: Account -> Security -> Manage Devices / Two-Factor Authentication A ME Account -> Sharing.
7. Ma Google Nest / Google Home: E kipa myaccount.google.com/device-activity a wehe Google Home -> Settings -> Household.
8. Ma Arlo: Settings -> Profile -> Login Settings -> Trusted Devices A ME Settings -> Grant Access.
9. ** Mālama i kāu Home Router System Log, DHCP Client Table, a UPnP Table**:
10. E komo i loko o ka pūnaewele pūnaewele o kāu router (http://192.168.1.1, http://192.168.0.1, a i ʻole http://10.0.0.1).
11. E hele i Administration / System Log -> kaomi Save / Export Log (keia waihona kikokikona e hoʻopaʻa i nā pilina WAN inbound, UPnP port-mapping noi, a me nā hanana hōʻoia Wi-Fi MAC kūloko).
12. E lawe i ke kiʻi kiʻi o ka DHCP Leases / Attached Devices papa inoa (e ʻike pono i ka IP kūloko a me ka helu MAC o ka pēpē pēpē / kāmela) a me ka UPnP / Port Forwarding ʻaoʻao.
13. E mālama i ka helu Serial o ke kāmela kino, ka helu MAC, a me ke kāleka MicroSD:
14. Inā loaʻa i ka pahupaʻikiʻi kahi wahi **Kāleka MicroSD ma ka ʻaoʻao a i ʻole lalo (Wyze, Eufy, Tapo, Reolink, Foscam), puka i ke kāleka MicroSD i waho i ka wā e wehe ʻia ai ka pahupaʻikiʻi a hoʻoneʻe i kahi mea hoʻopaʻa kākau a kope paha i kāna mau ʻike ma kahi kamepiula maʻemaʻe - nui nā pahu kiʻi e kākau kūloko .mp4 ʻāpana a me kahi kūloko syslog.txt diagnostics file pololei i ke kāleka SD inā paha i hoʻopau ka mea hoʻouka i ka clip cloud.

Māhele 3: Ke kipaku ʻana i ka mea hoʻouka mai kāu mau moʻokāki Cloud (Nā ʻanuʻu Brand-by-Brand)¶

Ke mālama ʻoe i nā kiʻi paʻi kiʻi o nā mea ʻae ʻole ʻia, e hoʻokō i ka pepehi kanaka piha ma kāu pahupaʻikiʻi, kamaʻilio akamai, a me nā paepae thermostat:

1. Amazon Ring, Blink, a Echo / Alexa (ʻElua ʻaoʻao "Holo i" Hijacks)¶

• Ma ka Ring App:
• Wehe Menu (≡) -> Control Center -> Authorized Client Devices -> kaomi "Wehe i nā mea āpau".
• Piʻi Control Center -> Shared Users -> wehe i kekahi mea hoʻohana āu i ʻike ʻole ai.
• Piʻi Control Center -> Account Verification -> hoʻololi i ka hōʻoia ʻelua-factor mai SMS Text i Authenticator App.
• Piʻi Control Center -> Amazon Account Linking a nānā inā pili kahi moʻokāki Amazon ʻike ʻole.
• Ma ka Amazon Alexa App (Koʻikoʻi inā hele mai kahi leo ma kahi Echo Dot / Echo Show):
• Nui nā "hoʻokomo leo leo akamai" no ka mea ua hiki i kahi lālā o ka ʻohana, ex-partner, a i ʻole ka mea hoʻouka kaua i hiki iā Alexa "Drop In" (ʻo ia ka mea e hoʻohuli ai i kahi mea haʻi'ōlelo Echo i kahi intercom ʻelua ala koke me ka pane ʻole o kekahi o ka lumi).
• E wehe i ka Alexa App -> Devices -> koho i kāu Echo speaker -> Settings (gear icon) -> Communications -> Drop In -> hoʻonoho iā Off (a i ʻole My Household Only).
• Kipa amazon.com -> Account & Lists -> Login & Security -> hoʻololi i kāu ʻōlelo huna a hele i Manage Your Content and Devices -> Devices e hoʻopau i ke kākau inoa ʻana i kekahi Echo ʻike ʻole, papa ahi, a i ʻole ka hoʻokomo ʻana i ka app Alexa.

2. Google Nest Nā kāmeʻa, nā bele puka, Hub Max, a me Nest Thermostats¶

1. No ka hoʻohana ʻana o Nest i kāu ** moʻokāki Google**, ʻo ka pahupaʻikiʻi Nest a i ʻole ka thermostat i hoʻopaʻa ʻia ʻo ia ʻo ua hoʻopili ʻia kāu moʻokāki Google holoʻokoʻa.
2. Wehe koke myaccount.google.com/device-activity -> kau inoa i kēlā me kēia kamepiula ʻike ʻole, kelepona, a i ʻole kau.
3. Wehe myaccount.google.com/connections (Nā polokalamu a me nā lawelawe ʻaoʻao ʻekolu) -> hoʻopau i kekahi alahaka home akamai ʻike ʻole a i ʻole hōʻailona OAuth.
4. E wehe i ka Google Home App -> Settings -> Household -> wehe i kekahi kanaka ʻaʻole hiki ke komo hou i kou home, a nānā Settings -> Works with Google e wehe i nā hoʻohui ʻike ʻole ʻia.

3. Wyze, Eufy, Arlo, TP-Link Tapo, a Nanit / Owlet Nā kiaʻi pēpē¶

1. E hoʻololi koke i ka ʻōlelo huna mai kāu polokalamu kelepona.
2. E ho'ā i ka Authenticator App (TOTP) ʻElua-Factor Authentication in Account -> Security.
3. ** ʻO ka hōʻailona hōʻailona koʻikoʻi ma nā polokalamu IoT pili kālā**: ʻO kekahi mau mea nānā pēpē liʻiliʻi a me nā ʻaoʻao o ke ao kamera IP ** ʻaʻole e hoʻopau koke i nā kahawai wikiō WebRTC / RTSP ke hoʻololi ʻoe i kāu ʻōlelo huna wale nō**.
4. Pehea e hoʻopaʻa ikaika ai i ke kahawai ikaika ma kekahi pahupaʻi kapuaʻi: Ma hope o ka hoʻololi ʻana i kāu ʻōlelo huna a hiki i ka 2FA, holo/wehe i ka pahupaʻikiʻi mai kāu moʻokāki i loko o ka app, hoʻopili hou i ka pahupaʻikiʻi me ka paʻa ʻana i kāna pihi Factory Reset no 15 kekona, a hoʻopaʻa iā ia mai ka ʻōpala. Hoʻopuka ka hoʻopaʻa hou ʻana i kahi ** hōʻailona hana cryptographic hou a me ke kī kau P2P UID **, e ʻoki mau ana i nā kahawai e mau ana.

4. Ecobee, Honeywell Home (Resideo), a me nā Thermostats akamai¶

Inā e loli ana kāu wela wela wela iā ia iho a i ʻole e hōʻike ana i nā memo ʻano ʻē: 1. E nānā mua inā ua hoʻokomo kāu pono uila iā ʻoe i kahi polokalamu **Demand Response / Peak Saver program ** (Eco+ ma Ecobee a i ʻole Seasonal Savings ma ka Nest) - hiki i nā ponohana ke hoʻololi mamao i nā mahana ma o 2 a 3 degere Celsius (3 a 5 degere Fahrenheit) i ka wā o ka piko o ka mānoanoa ke ʻole ke pio. 2. Inā ua hoʻohuli ʻia ka thermostat i ka wela/anu loa (32°C / 90°F a i ʻole 10°C / 50°F) a i ʻole PIN i laka ʻia e ka mea hoʻouka kaua: huki pololei i ka pale alo wela mai ka paia (e ʻoki ana i kāna 24V. R/C uea uila a hoʻopau koke i ka umu/AC), hoʻihoʻi i kāu ʻōlelo huna huna, hoʻopau i nā hoʻohui API ʻaoʻao ʻekolu (HomeKit, SmartThings, IFTTT), a hoʻonoho i kahi helu 4 Access Control PIN ma ka ʻāpana thermostat ma mua o ka hoʻihoʻi ʻana iā ia ma ka paia.

Māhele 4: Hoʻopaʻa ʻia i kāu Alaula Home a hana i kahi VLAN malihini IoT kaawale¶

ʻOiai inā paʻa nā kikowaena kapuaʻi o ka mea kūʻai aku, e noho ana ka pahupaʻikiʻi a i ʻole ka pēpē pēpē ma ka pā like 192.168.1.x ʻO ka pūnaewele Wi-Fi e like me kāu kamepiula pilikino a me kāu kelepona he pilikia palekana nui. E hahai i kēia mau ʻanuʻu ʻelima e paʻakikī i kāu pūnaewele home i 15 mau minuke:

KaʻAnuʻu Hana 1: Hoʻopau UPnP (Universal Plug and Play) Mau loa¶

1. E komo i kāu ʻaoʻao admin router (192.168.1.1 / 192.168.0.1 a i ʻole ma kāu mesh router app like Eero, Google Nest Wifi, TP-Link Deco, Netgear Orbi, UniFi, ASUS).
2. E hoʻokele i Advanced -> NAT Forwarding / WAN -> UPnP.
3. Hoʻololi UPnP i OFF (Nā ʻia) a kaomi i ka Apply / Save.
4. No ke aha e pono ai kēia: Me UPnP ua pio, ʻaʻole ʻae ʻia ka pahu kiʻi ʻoniʻoni, TV akamai, a i ʻole ka holo NAS i loko o kou hale e noi i ke alalai e wehe i kahi awa komo mai ka pūnaewele lehulehu ma hope o kou kua.
5. Nānā Port Forwarding / Virtual Servers a me DMZ: E hōʻoia i ka nele loa o ka pākaukau Port Forwarding (ke ʻole ʻoe e holo i kahi kikowaena hoʻokipa ponoʻī iā ʻoe e hoʻomaopopo) a ʻo DMZ ua pio.

KaʻAnuʻu Hana 2: E nānā i kāu IP IP Lehulehu ma Shodan.io¶

Makemake ʻoe e ʻike i loko o 10 kekona inā e hōʻike ana kāu mea hoʻokele home i kekahi pahupaʻikiʻi, nānā pēpē, paʻi, a i ʻole awa NAS i ka pūnaewele lehulehu? 1. Kipa whatismyipaddress.com a i ʻole ifconfig.me mai kou home Wi-Fi e kope i kāu helu IPv4 lehulehu (no ka laʻana, 203.0.113.45). 2. E hele i https://www.shodan.io a e ʻimi i kāu helu IP lehulehu (203.0.113.45). 3. Inā ʻōlelo ʻo Shodan "No information available" / 404, ke ʻaihue pono nei kāu pā ahi alalai i nā awa a pau. Inā helu ʻo Shodan i nā awa hāmama (80, 443, 554 RTSP, 1935 RTMP, 8000, 8080, 37777), ke hōʻike pololei nei kāu mea alalai i nā polokalamu i ka pūnaewele - hoʻopau UPnP, e holoi ana i ka Port Forwards, a e hoohuli i ka OFF Remote Web Management (WAN Admin) ma kāu alalai e pani koke i kēlā mau awa.

KaʻAnuʻu Hana 3: E hoʻoneʻe i nā kāmela a pau, Baby Monitors, a me nā polokalamu akamai i kahi kaʻawale Guest Wi-Fi (a i ʻole IoT VLAN)¶

ʻAʻole pono ʻoe i kahi pā ahi ʻoihana nui e hana i ka ʻāpana pūnaewele. 99 pākēneka o nā mea hoʻohana Wi-Fi a me nā ʻōnaehana mesh (Eero, Netgear, ASUS, TP-Link, ISP gateways) loaʻa kahi hiʻohiʻona "Guest Wi-Fi Network" i hana ma ke ʻano he VLAN kaʻawale: 1. Ma kāu hoʻonohonoho alalai, hoʻā i ka 2.4 GHz Guest Wi-Fi Network (hāʻawi iā ia i inoa i hoʻolaʻa ʻia e like me Home_IoT_24 a he 16 mau huaʻōlelo ikaika WPA2/WPA3 ʻokoʻa loa ka ʻōlelo huna mai kāu ʻōlelo huna Wi-Fi nui). 2. E hōʻoia i ka pahu pahu i kapa ʻia "E ʻae i nā malihini e ʻike kekahi i kekahi a e komo i kaʻu pūnaewele kūloko" (Local Network Access / Intranet Access) ua UNCHECKED (Nā ʻia) - kāhea pinepine ʻia AP Client Isolation. 3. Hoʻoponopono hou i kāu pēpē pēpē, nā pahupaʻikiʻi akamai, nā plugs akamai, ka ʻūhā robot, a me ka thermostat akamai, a hoʻopili iā lākou ** wale nō i ka Guest / IoT Wi-Fi pūnaewele**. 4. E mālama i kāu kamepiula pilikino, nā PC papapihi, nā atamai, nā papa, a me ka waihona NAS ma kāu Main Wi-Fi Network. I kēia manawa, ʻoiai inā loaʻa kahi hāmeʻa IoT maʻalahi i kahi kīʻaha kīwī lā ʻole, ua paʻa ʻia i loko o kahi kaila sandboxed hiki ke kamaʻilio wale i ka pūnaewele a ʻaʻole hiki ke ʻike a hoʻouka paha i kāu kamepiula.

KaʻAnuʻu Hana 4: No Generic / No-Name IP Cameras (ONVIF / RTSP), ālai i kā lākou Pūnaewele (WAN) Komo Loa¶

Inā ʻoe e hoʻohana kūloko RTSP / ONVIF nā kamera me Home Assistant, Frigate, Scrypted, Blue Iris, a i ʻole Synology Surveillance Station, ʻaʻole pono kēlā mau pahupaʻikiʻi ** i ka pūnaewele pūnaewele**: - Ma kāu ʻaoʻao Firewall / Parental Controls / MAC Filtering, e hāʻawi i ka pahupaʻikiʻi i kahi helu IP DHCP static a nānā iā "Block Internet Access (WAN Block)" no ka helu MAC o kēlā pahupaʻikiʻi. Hiki i ke kāmeʻa ke hoʻoheheʻe i ka wikiō wehewehe kiʻekiʻe ma ka ʻāina i kou home hub ma kāu pūnaewele kūloko, ʻoiai ua lilo ia i 100 pākēneka hiki ʻole i kekahi ma waho o kou home ke kiʻi i ka pahupaʻikiʻi a i ʻole ke kelepona ʻana i ka home i nā kikowaena P2P o waho.

Māhele 5: Hoʻopaʻa pilikino kino no nā kahu hānai a me nā lumi moe¶

ʻAʻohe polokalamu pā ahi e like me ka hilinaʻi e like me ke physics kino. E hoʻokō i kēia mau lula ʻehā no kēlā me kēia pahupaʻikiʻi i loko o ka home:

• Mai hoʻokomo i kahi pahupaʻikiʻi Wi-Fi i hoʻopili ʻia i ke ao i loko o kahi lumi moe makua a i ʻole ka hale ʻauʻau, a kuhikuhi i nā kiaʻi hānai pēpē WALE ma ka moena: E hoʻohuli i ka nānā ʻana i ka nursery i lalo no laila ʻo loko wale nō o ka moena i loko o ke kiʻi - ʻaʻole i ka papaʻaina hoʻololi, noho kahu hānai, a i ʻole ka puka lumi moe.
• E hoʻololi i kahi Loop Paʻa ʻole Wi-Fi DECT 6.0 a i ʻole Kikohoʻe FHSS Mākaʻikaʻi pēpē no ka Nursery: Nā mākaʻikaʻi wikiō kūloko-lekio i hoʻolaʻa ʻia (e like me Infant Optics DXR-8 Pro, Eufy SpaceView ano kūloko, VTech non-Wi-Fi, a i ʻole Babysense) loaʻa ʻaʻohe puʻupuʻu Wi-Fi, ʻaʻohe moʻokāki kapua, a ʻaʻohe hoʻohui pūnaewele. No ka mea, ʻaʻole lākou i pili i kāu kelepona a i ʻole ka pūnaewele, ʻaʻohe mea hacker ma kekahi kūlanakauhale a ʻāina ʻē aʻe e hiki ke hōʻoiaʻiʻo-mea a hao paha iā lākou.
• E hoʻohana i kahi Kāpena Lens Kino a i ʻole Smart Plug Power Schedule ma nā kiʻi paʻi kiʻi o loko o ka lumi noho: E hoʻopili i nā kiʻi kiʻi kiʻi holoholona i loko a i ʻole ka lumi noho i loko o kahi manawa mīkini maʻalahi a i ʻole kahi plug akamai mai kahi mea kūʻai * ʻokoʻa * no laila e ʻoki kino ʻia ka mana i ke pahupaʻikiʻi ke noho ʻoe i ka home, a i ʻole e kūʻai i nā pahupaʻikiʻi me kahi pani mīkini mīkini e ālai kino ai i ka lens a wehe i ke kaapuni microphone ke pani ʻia.
• Haʻalele i ke kūlana kiʻi kiʻi LED (Blue / Red Recording Light) Ua hiki: Nui nā mea hoʻouka kaua e hele koke i nā hoʻonohonoho kamera a huli Status LED = OFF no laila ʻaʻole ʻoe e ʻike i ka wā e hoʻopili ai lākou e nānā Live View. E nānā i nā hoʻonohonoho polokalamu kiʻi paʻi kiʻi a mālama i ka hōʻailona kūlana hoʻopaʻa leo i hoʻohuli ʻia ** ON **, a uhi i ka pahu microphone me ka lipine uila mānoanoa inā ʻaʻole ʻoe e hoʻohana i nā leo ʻelua ala.

Nā helu ulia pōpilikia āpana a me nā protocols oihana¶

ʻO ka loaʻa ʻole ʻana i kahi pahupaʻikiʻi palekana home a i ʻole ka nānā ʻana i nā pēpē he mea hoʻopiʻi koʻikoʻi kamepiula a me ka hewa voyeurism. E hōʻike koke mai:

• ** ʻAmelika Hui Pū ʻIa**: Kāhea 911 inā manaʻo ʻoe aia kahi mea komo ma kahi kokoke i kou home. Waiho i kahi hōʻike ma FBI IC3 (ic3.gov) me nā kiʻi paʻi kiʻi o ka hoʻopaʻa inoa ʻole, ka helu IP, a me ka hōʻailona manawa (18 U.S.C. § 1030 CFAA a me 18 U.S.C. § 2261A), a hōʻike i ka lako IoT palekana i ka FTC (ReportFraud.ftc.gov).
• Kanada: Kāhea 911, waiho i ka hoʻopiʻi mākaʻi ma lalo o Pauku 342.1 a me 162 (Voyeurism) o ke Kāwai Kalaima o Kanada, a e hoʻolaha i ka Canadian Center for Cyber Security (cyber.gc.ca).
• United Kingdom: Kāhea 999 (a i ʻole 101 no nā mākaʻi pilikia ʻole) a hōʻike i ke komo ʻole ʻia ma lalo o ka Computer Misuse Act 1990 i Action Fraud (0300 123 2040 / actionfraud.police.uk).
• Uni ʻEulopa: Kāhea 112 ma nā mokuʻāina āpau o EU a waiho i kahi hoʻopiʻi hewa me nā mākaʻi cybercrime aupuni.
• Australia a me New Zealand: Kāhea 000 ma Australia a i ʻole 111 ma Aotearoa; hōʻike iā ACSC (cyber.gov.au / 1300 292 371) aiʻole CERT NZ (0800 237 869).
• India a me Asia-Pākīpika: Kāhea 112 no ka pane ulia pōpilikia a i ʻole 1930 (cybercrime.gov.in) e hōʻike i ke kiʻi paʻi kiʻi ʻae ʻole ma lalo o nā Pauku 66 a me 66E o ka Information Technology Act, 2000.

Nīnau pinepine¶

Pehea e hiki ai iaʻu ke ʻike inā he kanaka hacker pūnaewele ka mea nāna i ʻōlelo ma o kaʻu pahupaʻikiʻi ma mua o kekahi e huli pono ana i koʻu hale?¶

E nānā i ʻelua mau mea: (1) Ua hoʻohana hou ʻoe i ka leka uila a me ka ʻōlelo huna o kāu moʻokāki kamera ma nā pūnaewele ʻē aʻe me ka ʻole o ka ʻae ʻana i ka hōʻoia ʻelua-Factor Authentication (`2FA`)? A (2) He aha kā ka leo i ʻōlelo ai? Ma luna o 90 pakeneka o nā hihia kahi malihini e uwē ai i nā ʻōlelo ʻino, hoʻokani mele, a i ʻole ʻōlelo ʻo ia ʻo "Santa Claus" a i ʻole he hacker ma o apo, Wyze, a i ʻole Nest kamera, he hoʻouka hōʻoiaʻiʻo kūpono: Ua hoʻāʻo nā bots automated i nā miliona o nā leka uila a me ka ʻōlelo huna mai nā haki ʻikepili kahiko (`haveibeenpwned.com`), ua ʻike ʻoe ua hana kāu ʻōlelo huna ma Ring/Wyze, a me nā trolls ma kahi forum online a i ʻole server Discord e pili ana i nā kakini o nā kiʻi paʻi kiʻi i ka manawa hoʻokahi me ka ʻike ʻole i ke kūlanakauhale a i ʻole ka mokuʻāina āu e noho ai. ex-partner, a i ʻole hoalauna a hoʻomaopopo koke i nā mākaʻi kūloko.

No ke aha i neʻe ai a kaomi hoʻokahi paha ka leki uila o kaʻu pahupaʻikiʻi i ka pō - ʻo ia hoʻi ke nānā mau nei ka mea hacker?¶

ʻAʻole i nā manawa a pau - aia ʻekolu kumu maikaʻi ʻole ke kaomi ʻana a neʻe paha ka pahupaʻikiʻi i ka pō e pono ai ʻoe e hoʻokuʻu ma hope o ka nānā ʻana i kāu mau loina: (1) Infrared (`IR`) Oki Kānana Kānana: Ke hāʻule ke kukui o ka lumi i ka pō a i ʻole ke kaʻa ʻana o ke kukui o ke kaʻa, ʻo ka solenoid mechanical i loko o ka pahupaʻikiʻi e hoʻoheheʻe kino i kahi kānana infrared ma o ka lens me kahi mea kani. " kaomi-kaʻi" kani; (2) Hoʻomaka hou a hoʻopaʻa ʻia ʻo Firmware: Kokoke a pau i ka pan-and-tilt (`PTZ`) kiʻi kamepiula (`Wyze Cam Pan`, `Eufy Indoor Cam Pan`, `Tapo`, `Reolink`) e hoʻokomo i nā mea hou firmware ma waena o 2:00 AM a me 4:00 AM, a ma ka hoʻomaka hou ʻana, e wili ʻakomi ko lākou stepper motors 360 degere hema-a-ʻākau a i luna-i-lalo e calibrate i ko lākou kūlana home; a me (3) Ka hoʻokolo ʻana i ka neʻe ʻana: Inā ho'ā 'ia ka "Motion Tracking" i loko o ka polokalamu, hiki i ka pe'ahi kaupaku, ka pipi, a i 'ole ka lepo lepo i mua o ka LED infrared hiki ke ho'omoe i ka lens ma luna o ka lumi. E nānā i kāu polokalamu Nā Mea Hana Mana papa inoa a me firmware update timestamp e hōʻoia.

Hiki iaʻu ke hoʻoikaika i kaʻu mea kūʻai kamera (Ring, Wyze, Nest, Arlo, Nanit) e haʻi mai iaʻu i ka IP address o ka mea i komo i loko o kaʻu moʻokāki a kamaʻilio me kaʻu keiki?¶

ʻAe. ʻOiai ke hōʻike wale nei ka mea hoʻohana maʻamau o ka app i ke ʻano o ka hāmeʻa (e like me "Chrome ma Windows" a i ʻole "iPhone") a me ke kūlanakauhale kokoke, ka hōʻoia hope hope a ka mea kūʻai aku a me nā kikowaena media WebRTC e hoʻopaʻa i ka pololei. kumu helu IPv4/IPv6, mea hoʻohana-Agent string, ka manawa hoʻomaka/hopena manawa, a me ka hanana hoʻonā leo ʻelua ala.. E wehe koke i kahi tikiki kākoʻo me ka Pūʻulu Palekana / Kuleana o ka mea kūʻai aku e noi ana iā lākou mālama i nā moʻolelo hōʻoia a me WebRTC no kāu moʻokāki, a waiho pū i kahi hōʻike mākaʻi kūloko a me GDPR/CCPA Subject Access Request (`DSAR`) no ka moʻolelo IP komo piha o kāu moʻokāki.

Ua palekana paha kahi pēpē pēpē e ʻōlelo nei "2.4 GHz FHSS" mai nā mea hackers pūnaewele?¶

ʻAe, mai pūnaewele puni honua hackers: he mea hoʻolaʻa 2.4 GHz FHSS (Frequency-Hopping Spread Spectrum) ka nānā ʻana e hele mai me kāna ʻaoʻao makua lima ponoʻī a ʻaʻohe chip Wi-Fi a i ʻole polokalamu kelepona ʻo 100 pākēneka ka pale ʻana i nā mea hackers pūnaewele, nā mea hōʻoiaʻiʻo, a me nā nāwaliwali o ke alalai. Eia nō naʻe, hiki i nā mea nānā analog/FHSS i hoʻopaʻa ʻole ʻia a ʻoi aku paha ke kiʻi i kekahi manawa i ka lekiō pōkole a i ʻole ke kamaʻilio ʻana mai kekahi pēpē pēpē, kelepona ʻole, a i ʻole lekiō amateur i loko. 90 a 300 mika (300 a 1,000 kapuaʻi). Kikohoʻe hou DECT 6.0 a i ʻole AES-128 i hoʻopili ʻia nā mākaʻi FHSS e pale i ka lekiō maʻamau.

Inā wehe wale au i ka pahupaʻikiʻi i ka pō a hoʻopaʻa hou iā ia i ka lā ʻapōpō me ka hoʻololi ʻole i kaʻu ʻōlelo huna, ua kiki ʻia ka mea hacker?¶

ʻAʻole. ʻO ka wehe ʻana i ka pahupaʻikiʻi e ʻoki wale i ka mana oiai ke kaula i waho o ka pā. ʻO ka millisecond āu e hoʻopili ai i ka pahupaʻikiʻi i ka lā ʻapōpō me ka hoʻopau ʻole ʻana i nā kau, hoʻololi i kāu ʻōlelo huna huna, hiki iā 2FA, a i ʻole ka hoʻopau ʻana i ke alalai. UPnP, hoʻopili hou ka pahupaʻikiʻi i ka moʻokāki kapua like (kahi i hoʻopaʻa ʻia ai ke kelepona o ka mea hoʻouka a loaʻa iā ia ka leka hoʻomaopopo koke ʻana ua hoʻi kāu pahupaʻikiʻi ma ka pūnaewele). Mai hoʻopili hou i kahi pahupaʻikiʻi i hoʻopaʻa ʻia a hoʻopau ʻoe i ka Phases 3 a me 4 ma luna.

Pehea inā hoʻokomo kekahi hoa hana ʻino i ka Ring, Nest, a i ʻole Eufy nā kāmera i ko mākou noho pū ʻana a aia ka moʻokāki "Owner / Primary Admin" i kā LĀUA helu leka uila?¶

I loko o nā kaiaola home akamai e like me apo, Nest, ʻO Arlo, a Eufy, ʻaʻole hiki i ka "Shared User" ke holoi a kiki paha i ka moʻokāki "Primary Owner" - a inā ʻoe e kaomi i ke pihi Factory Reset kino ma ke kiʻi Ring a i ʻole Arlo, paʻa paʻa ka helu serial/MAC o ka hāmeʻa (`Device Theft / Ownership Lock`) i ka mooolelo o ka mea nona ka mooolelo a hiki i ka wa e pa'i ai lakou i ka "Remove Device" i loko o ka lakou app. Inā ʻo ka hoa hana hoʻomāinoino i hoʻopaʻa inoa ʻia ka mea nona nā kiʻi paʻi kiʻi, nā bele puka, a i ʻole nā laka akamai i kou home, wehe a wehe kino i kā lākou mau pahupaʻikiʻi koke, e hoʻololi iā lākou me nā lako i hoʻopaʻa inoa wale ʻia i kāu moʻokāki leka uila hou, a hoʻololi i kou inoa pūnaewele Wi-Fi home (`SSID`) a me ka ʻōlelo huna i hiki ʻole i kā lākou mau mea kahiko ke hoʻohui hou.

Nā alakaʻi pili¶

• ʻO ka hack home akamai, ka hoʻopaʻa paʻi kiʻi, a me ka stalkerware
• Hoʻopaʻa i nā mea hoʻokele home a me nā mea IoT
• ʻO ka hoʻouka ʻana i nā bot automated e hoʻopiha i ka hōʻoia i nā mile kūpaʻa, nā kāleka makana, a me nā moʻokāki
• Hoʻopaʻa ʻia ka home a i ʻole ke keʻena liʻiliʻi NAS (QNAP/Synology) a me ka pani hoʻoneʻe ʻana o ke awa UPnP
• ʻO DNS hijacking, ISP router WAN reconfiguration, a me ka hoʻopunipuni puka pio
• Nā helu pilikia ma ka ʻāina

Nā kumu a me ke alakaʻi kūhelu¶

• Federal Bureau of Investigation (FBI) (ʻAmelika Hui Pū ʻIa): * Hoʻolaha i ka lawelawe lehulehu I-123020-PSA & Nā ʻōlelo aʻoaʻo ʻo Smart Home IoT: Hoʻopaʻa ʻana i nā kāmera akamai, nā kiaʻi pēpē, a me nā mea kōkua leo e kūʻē i ka Credential Stuffing a me "Swatting" Hijacks*.
• Keʻena palekana Cybersecurity a me Infrastructure Security Agency (CISA) & 'Oihana Palekana Lahui (NSA) (ʻAmelika Hui Pū ʻIa): * Pepa ʻIkepili Cybersecurity: Hoʻopaʻa ʻana i nā Pūnaewele Uila, Hoʻopau i ka UPnP, a me ka hoʻokaʻawale ʻana i nā mea IoT Home ma luna o nā VLAN malihini *.
• Komisina Kālepa Federal (FTC) (ʻAmelika Hui Pū ʻIa): *Me ka hoʻohana ʻana i nā kiʻi kiʻi kiʻi IP a me nā mākaʻi pēpē i hoʻopili ʻia ma ka pūnaewele me ka palekana *.
• Kikowaena Cyber ​​Lahui (NCSC) (United Kingdom): *Nā mea akamai i loko o ka Home: Hoʻonohonoho ʻana i nā kāmela, nā kiaʻi pēpē, a me nā mea kamaʻilio akamai me ka palekana a me ke alakaʻi ʻana i ke kānāwai palekana a me ke kelepona uila (PSTI) *.
• Hui Pūʻulu ʻEulopa no Cybersecurity (ENISA): Nā alakaʻi no ka hoʻopaʻa ʻana i ka Pūnaewele o nā Mea (IoT) a me ka ʻāpana Home Network Segmentation.