Umuntu Avuga Biciye ku Baby Monitor yawe canke Smart Security Camera: Ubwo nyene uhagarike kandi ushire kure¶

Kumva ijwi ry’umuntu utazi avuga biciye ku gikoresho co kugenzura abana c’umwana wawe kiri kuri Wi-Fi (Nanit, Owlet, Eufy, VTech, Lollipop, Motorola), kuraba ikintu co mu nzu . Ring, Wyze, Arlo, Blink, Google Nest, canke TP-Link Tapo kamera ikoreshwa n’imoteri izunguruka mu cumba cawe co kuraramwo, ibona itara ry’ubururu/umutuku ry’ibara ry’ibara ry’iyi kamera rimurikira isaha zibiri z’ijoro, canke ibona ivyawe Ecobee / Nest thermostat y’ubwenge ishobora gutera ubushuhe bwa degre 32 (degre 90 Fahrenheit) ni igitero giteye ubwoba co mu nzu yawe. Ariko rero, kiretse iyo umuntu utazi ari hanze y’inzugi zawe, ivyo ni hafi y’igihe cose ari ugutera imbere kw’igicu canke kw’ibarabara ry’ibarabara aho kuba umuntu ahagaze hanze y’idirisha ryawe. Ivyiyumviro birenga 90 kw’ijana vy’ugufata amasanamu y’ijwi mu buryo bubiri bishika muri bumwe muri ubu buryo bubiri: (1) Automated Credential Stuffing (aho abagizi ba nabi bafata imeyili ya kera n’ijambobanga wasubiyemwo ku rubuga rw’ubudandaji rwacitse intege maze bakabishira mu gikoresho citwa bot cinjira muri urubuga rwawe Ring, Wyze, Nest, canke porogarama y’igicu yo kugenzura abana iri ku bilometero ibihumbi n’ibihumbi), canke (2) Gushira ahabona IP yo mu karere / UPnP Port Forwarding Exposure (aho kamera ya IP rusangi canke igikoresho co gufata amasanamu c’urubuga NVR ikoreshwa UPnP Gufungura icambu 554 RTSP, 80, canke 8000 nyene kuri interineti ya bose kandi yashizwe mu rutonde n’ishirahamwe Shodan.io moteri y’ugushakashaka). Kugira ngo router yo mu nzu ikomeze, raba kandi gukingira ama router yo muhira n'ibikoresho vya IoT; niba wicura ko uwo mwahora mukundana canke uwuguhohotera mu rugo ari we ariko aragenzura amafunguro n’amatara yo mu nzu yawe yose, raba . hack y'inzu y'ubwenge, kwiba kamera, n'ubuhinga bwo gukurikirana; canke nimba igikoresho cawe co kubika NAS cakubiswe iruhande y’amakamera yawe, nusuzume . inzu canke ibiro bito vyahungabanye NAS na UPnP birafunga. Niwumva ibirenge vy’abantu, ubonye umuntu ku butaka bwawe, canke utinya ko umuryango wawe uzoca ugira umutekano, hamagara inomero y’ivyihutirwa yo mu karere kawe (911 muri Leta Zunze Ubumwe za Amerika no muri Kanada, 112 mu bihugu vyose vy’Ubumwe bw’Uburaya, 999 mu Bwongereza) ubwo nyene canke urabe ububiko bwacu bwo kw’isi yose bw’ inomero z'ivyihutirwa.

Ivyo ubikore ubu¶

1. Kura umugozi w’amashanyarazi inyuma y’ikigereranyo c’umwana canke kamera yo mu nzu (hanyuma ukureho bateri yose yo mu mutima) mu masegonda 5:
2. Ntu uta umwanya wo gufungura app ya telefone kugira ngo ufungure kamera "Off" muri software - umuterabwoba afise ububasha bwo kugenzura konti y'igicu arashobora guhindura software "Privacy Mode" akayisubiramwo mu segonda 1, kandi ama camera amwe amwe yahungabanijwe arabandanya gutanga amajwi mbere n'igihe app yerekana ko video feed yahagaze. Kura umugozi w’uruhome canke umugozi w’amashanyarazi wa USB-C muri kamera ubwo nyene.
3. Suzuma izindi kamera zose zo mu nzu za Wi-Fi mu vyumba vyawe, mu nzu y’abana, no mu bibanza vyo kubamwo maze na zo nyene uzikuremwo. (Siga ama kamera yo hanze y’inzira y’imodoka/y’inkengeri y’umuryango afunguwe gusa umaze kugenzura nimba hari umuntu ari hanze y’inzu yawe.)
4. NTUKONDE buto y'ivyuma "Factory Reset" ku kamera canke ngo usubire gufungura router yawe ya Wi-Fi:
5. Gukanda Factory Reset kuri kamera canke gukuraho Wi-Fi yo mu nzu yawe bikuraho amakuru ya RAM (DHCP leases, UPnP port mappings, NAT connection tables, n’amasanamu y’ibintu biherutse gukorwa mu gicu) yerekana aderesi IP y’uwateye, ikidodo c’igihe co kwinjira, be n’uko uwo mutera yinjiye biciye kuri konti yawe yo mu gicu canke biciye ku rubuga rwa Wi-Fi rwawe rwo mu karere.
6. Fungura porogaramu y'amafoto yawe (Ring, Wyze, Nanit, Eufy, Arlo, Nest / Google Home) maze ufate amafoto y'"Ibikoresho Vyemerewe / Vyinjiye" n'"Abakoresha Basangiye" IMBERE yo kubikuraho:
7. Raba munsi Account Settings -> Authorized Client Devices / Login Activity / Shared Users. Igishushanyo c'igikoresho cose (iPhone 15, Web Browser - Chrome on Windows, Android Emulator), aho uri, n’ikidodo c’isaha y’ivyo raporo yawe ya polisi.
8. Ubwo nyene ukande kuri Kuraho / Sohoka mu bikoresho vyose, ukureho Abakoresha basangiwe / abashitsi bose batazwi, uhindure ijambobanga rya konti yawe ribe ijambobanga rishasha ry’inyuguti 16+, hanyuma ufungure Ivyemezo vy’Ibintu Bibiri (2FA) ukoresheje Porogaramu y’Ivyemezo (ntiwigere urungika SMS canke email nimba porogaramu ishigikiwe).
9. Suzuma nimba igikoresho cawe co kugenzura umwana ari igikoresho co kugenzura iradiyo idakoresha Wi-Fi (FHSS 2.4 GHz canke DECT 900 MHz) n'igicu ca Wi-Fi:
10. Itandukaniro rikomeye ry’umutekano w’umubiri: Nimba umwana wawe ata Wi-Fi afise kandi ata porogarama ya telefone ngendanwa (gusa igikoresho c’umuvyeyi gifatwa mu minwe n’igikoresho co gufata amasanamu gikoresha 2.4 GHz FHSS canke iradiyo analogique), ntishobora gufatwa kuri internet. Ijwi riza biciye ku gikoresho co kugenzura iradiyo idakoresha Wi-Fi riva mu metero 90 gushika kuri 300 (amafuti 300 gushika ku 1.000) y’inzu yawe - ryoba ari ijambo ry’umusaraba ry’impanuka rivuye ku gikoresho co kugenzura abana c’umubanyi/walkie-talkie kiri ku murongo umwe w’incuro, canke umuntu ahagaze hanze afise umurongo w’incuro. Nimba iryo jwi ryavuganye n’umwana wawe ataco rihinduye kuri radiyo idakoresha Wi-Fi, funga inzugi zawe maze uhamagare abapolisi b’ivyihutirwa (911 / 999 / 112) ubwo nyene.
11. Injira muri Router yawe ya Wi-Fi yo muhira (192.168.1.1 canke 192.168.0.1) hanyuma uzime UPnP (Universal Plug and Play) hanyuma usibe ikintu cose kitazwi Port Forwarding amategeko:
12. Amakamera ya P2P atari menshi canke afise ikimenyetso cera (VStarcam, Foscam, Tenvis, Hikvision, Dahua, CamHi) gukoresha UPnP gutera ibipfunsi mu gacerere ku vyambu vyuguruye (554, 80, 8000, 37777) ku ruhome rwawe rwa router rero umuntu wese kuri Shodan.io ushobora kuraba no kuvuga biciye ku kamera ata n’ijambobanga ryawe rya Wi-Fi ukeneye.
13. Kura ama kamera yose, ama moniteur y'abana, ama thermostats y'ubwenge, n'ama speaker y'ubwenge ku Wi-Fi yo mu nzu yawe, ubishire ku kibanza kiri ukwaco Guest Wi-Fi Network (canke yiyemeje IoT VLAN na Client Isolation vyashobojwe):
14. Naho igikoresho c’ubwenge, igikoresho co gusukura amazi, canke igikoresho co kugenzura abana coshobora gushikirwa n’ingorane zo mu gicu muri kazoza, kugitandukanya ku VLAN ya Wi-Fi y’abashitsi birabuza igikoresho gishobora guhungabana gucapura canke gutera ama laptops yawe yo ku kazi, amatelefone canke umuduga wa NAS wo mu nzu.

Igiti c’ingingo: inyishu ubwo nyene iyo umunyamahanga avuze canke yimura kamera yo mu nzu¶

Kurikiza iki giti c’ingingo mu minota 2 ya mbere y’ivyo vyabaye kugira ngo usuzume umutekano wo ku mubiri, uzigame ibimenyamenya, kandi ufunge uwuje kwinjira:

flowchart TD
    Start["Ijwi ry'umunyamahanga ryumvikana biciye ku gikoresho co kugenzura abana / kamera y'ubwenge, canke igikoresho co gufata amasanamu kigenda ku giti caco"] --> UnplugNow["INTAMBWE YA 1 (Amasegonda 0 gushika kuri 5): Kura Umugozi w’Amashanyarazi (Maze Ukureho Bateri) Kuri Camera Ubwo nyene"]

    UnplugNow --> MonitorType{"Mbega Iyi Moniteur Ihuza na Wi-Fi / App ya Smartphone, Canke Ni Moniteur ya Radiyo yo mu Karere Yihariye (Nta Wi-Fi)?"}

    MonitorType -->|"Nta Wi-Fi / Nta Porogaramu (Yihariye 2.4 GHz FHSS canke Igikoresho c'Umuvyeyi)"| RadioAlert["IMBURIZO Y’UBWO HAFI: Ikimenyetso Kivuye Mu Metero 90 gushika kuri 300 (Ibirenge 300 gushika ku 1.000) vy’Inzu Yawe"]
    RadioAlert --> TalkDirect{"Ijwi ryoba ryavuze ataco rihinduye ku cumba cawe/umwana wawe, canke ryavuga nk’umubanyi/CB Cross-Talk?"}
    TalkDirect -->|"Yavuze ataco akora / Nabi"| CallPoliceNow["Ufunge inzugi n'amadirisho ubwo nyene maze uhamagare 911 / 999 / 112 kugira ngo abapolisi bagenzure hanze"]
    TalkDirect -->|"Mugufi w'umubanyi / Walkie-Talkie Ikiganiro c'umusaraba"| RePairChannel["Gusubira gufatanya igice c'umuvyeyi n'icamera kugira ngo uhindure imbuto y'ugusimbuka ya FHSS canke uhindure ku DECT 6.0Igikoresho co kugenzura"]

    MonitorType -->|"Wi-Fi / Igicu gikoresha kamera (Impeta, Wyze, Nanit, Eufy, Urusenga, Arlo, RTSP rusangi)"| CloudVsLocal{"None Uwo Munyagihugu Yashitse Gute Ku Kamera?"}

    CloudVsLocal -->|"Vecteur A: Ugushiramwo ivyemezo vya konti y'igicu (90% vy'ibibazo vy'impeta / Wyze / urusenga / Nanit)"| CloudLockdown["1. Gufata igicapo c'ibikoresho vyemewe n'amateka y'ivyabaye muri App -> 2. Gukuraho Ivyigwa vyose -> 3. Gusubiramwo ijambobanga + Gukoresha Authenticator 2FA"]

    CloudVsLocal -->|"Umurongo B: UPnP / Icibutso Imbere / Shodan Utaziguye IP Umugezi (ONVIF rusangi / RTSP / Foscam / Hikvision)"| RouterLockdown["1. Screenshot Router UPnP n'Imbonerahamwe y'Imbere y'Ikivuko -> 2. Guhagarika UPnP & Gukuraho Ivy'Imbere y'Ikivuko -> 3. Guhagarika Camera WAN Access mu Firewall"]

    CloudVsLocal -->|"Vecteur C: Uwahoze ari umugenzi / Uwahoze ari umushitsi wo mu nzu / Konti y'urugo rusangi"| SharedLockdown["1. Gusuzuma 'Abakoresha Basangiye / Abagize Urugo' muri App -> 2. Guhindura Wi-Fi SSID & Ijambobanga rya WPA2/WPA3 -> 3. Gusubiramwo uruganda & Gusubiramwo Camera kuri Konti Nshasha"]

    CloudLockdown --> VLANIsolate["Intambwe ya nyuma: Rema urubuga rwa Wi-Fi rw’abashitsi / IoT (Ukwitandukanya kw’abaguzi ON) hanyuma wongere uhuze ibikoresho vy’ingenzi gusa"]
    RouterLockdown --> VLANIsolate
    SharedLockdown --> VLANIsolate

Icigwa ca 1: Gusuzuma ingene uwo muterabwoba yinjiye muri kamera yawe canke mu gikoresho co gupima ubushuhe¶

Imbere y’uko usubiramwo ikintu cose, menya neza inzira zine zo kwinjira uwo muterabwoba yakoresheje. Ivyo bikubwira nimba uwo muntu yaguteye yari afise uburenganzira bwo gukoresha porogarama imwe gusa y’amafoto yo mu gicu canke nimba urubuga rwawe rwose rwa Wi-Fi rwo mu nzu rwari rwacitse intege.

Icigwa ca 2: Kuzigama Ivyemezo Imbere y’Ugusubiramwo (Iminota 2 gushika ku 15)¶

Iyo umuntu utazi yavuganye n’umwana wawe, akagirira nabi umuryango wawe canke akatata mu cumba co kuraramwo, ico gikorwa ni icaha co kwinjira muri orodinateri no kumukurikirana. Rindira iminota 10 kugira ngo ufate ibi bimenyamenya bine vy’ubuhinga bwa none imbere yo guhanagura canke gukuraho amakonti, kuko iyo umaze gukuraho igikoresho muri porogarama yawe yo mu gicu, abakozi bo mu gicu b’umucuruzi akenshi basukura ivyabaye bifitaniye isano n’ivyo n’amasanamu y’amasanamu ubwo nyene:

1. Ukureho amasanamu/amajwi ku rutonde rw'igihe rw'igicu rwa kamera ubwo nyene:
2. Amakamera menshi akoreshwa n’inyigisho kandi akomeza gufata amasanamu (Ring, Nest Aware, Wyze Cam Plus, Nanit, Arlo, Eufy) yandika ivyo umuvugizi wayo bwite avuga be n’ingene ivyumba vyifatamwo igihe umuntu avuga insiguro y’inzira zibiri (Live View) irakora.
3. Gufungura urutonde rw'amateka y'ivyabaye muri porogarama ku munota nyawo wumvise ijwi, kuraho .mp4 clip ku rutonde rw'amasanamu yo mu karere ka telefone yawe, kandi ushireko urutonde rw'igihe c'ivyabaye rwerekana ikidodo nyaco c'igihe (HH:MM:SS n’isaha).
4. Igishushanyo c'urutonde rwa "Ibikoresho vyemewe" n'"Abakoresha basangiye" rwa Camera App:
5. Mu mpeta: Menu (≡) -> Control Center -> Authorized Client Devices KANDI Shared Users.
6. Muri Wyze: Account -> Security -> Manage Devices / Two-Factor Authentication KANDI Account -> Sharing.
7. Mu rugo rwa Google / Inzu ya Google: Sura myaccount.google.com/device-activity kandi ufungure Google Home -> Settings -> Household.
8. Muri Arlo: Settings -> Profile -> Login Settings -> Trusted Devices KANDI Settings -> Grant Access.
9. Bika Router yawe yo muhira System Log, DHCP Client Table, na UPnP Table:
10. Injira mu rubuga rwa router yawe (http://192.168.1.1, http://192.168.0.1, canke http://10.0.0.1).
11. Genda kuri Administration / System Log -> kanda Bika / Sohora Igitabo (iyi dosiye y'inyandiko yandika amahuza ya WAN yinjira, ibisabwa vyo gukora ikarita y'ibarabara rya UPnP, n'ibintu vy'ukwemeza Wi-Fi MAC yo mu karere).
12. Fata ifoto y'ivyo DHCP Leases / Attached Devices urutonde (mu buryo bwihariye IP na MAC aderesi y’aho hantu y’ivyo bikoresho vy’ugukurikirana umwana/ivyo gufata amasanamu) n’ivyo UPnP / Port Forwarding urupapuro.
13. Zingama inomero y'urutonde rwa kamera, aderesi ya MAC, n'ikarita ya MicroSD:
14. Nimba kamera ifise Ikibanza co gushiramwo ikarita ya MicroSD ku ruhande canke hasi (Wyze, Eufy, Tapo, Reolink, Foscam), sohora ikarita ya MicroSD mu gihe kamera ivuye mu muyagankuba hanyuma ushireko igikoresho co kwandika canke ukope ibirimwo kuri mudasobwa isukuye - ama kamera menshi yandika ivy’aho hantu . .mp4 ibice n'aho hantu syslog.txt dosiye y’ibizamini ihita ija ku ikarita SD naho uwo mutera yoba yarafuse igice c’igicu.

Icigwa ca 3: Kwirukana uwugutera muri konti zawe zo mu gicu (Intambwe z’ibara ku yindi)¶

Umaze kubika amafoto y’ibikoresho bitemewe, kora igice cose c’ukwica ku kamera yawe, ku nsiguro y’ubwenge, no ku bikoresho vy’ubushuhe:

1. Amazoni Ring, Blink, na Echo / Alexa (Inzira zibiri "Drop In" Hijacks)¶

• Muri porogaramu y'impeta:
• Gufungura Menu (≡) -> Control Center -> Authorized Client Devices -> ushireko "Kuraho ibikoresho vyose".
• Kanda Control Center -> Shared Users -> ukureho umukoresha wese utazi.
• Kanda Control Center -> Account Verification -> guhindura Ivyemezo vy'Ibintu Bibiri kuva ku Inyandiko ya SMS gushika kuri Iporogarama y'Ivyemezo. 4.Kanda Control Center -> Amazon Account Linking kandi urabe nimba hariho konti ya Amazon utamenyereye ihuye.
• Muri porogarama ya Amazon Alexa (Igihambaye cane iyo ijwi ryaje biciye mu nzira y’ijwi / Iyerekanwa ry’ijwi):
• "Ijwi ry'umuvugizi w'ubwenge ryinshi" rishika kubera ko uwo mu muryango, uwo mwahora mukundana, canke uwumuteye yashoboje Alexa "Drop In" (ivyo bikaba bihindura umuvugizi wa Echo ngo abe interphone y'inzira zibiri ata n'umwe mu cumba yishura).
• Gufungura Alexa App -> Ibikoresho -> uhitemwo ijwi ryawe ry'ijwi -> Amategeko (ikimenyetso c'ivyuma) -> Ivy'itumanaho -> Gushiramwo -> ubishire kuri Off (canke My Household Only).
• Gusura amazon.com -> Account & Lists -> Login & Security -> hindura ijambobanga ryawe ugende kuri Manage Your Content and Devices -> Devices kugira ngo ukureho ivyanditswe vyose bitazwi vya Echo, Fire tablet, canke Alexa app.

2. Google Nest Amafoto, Inkengeri z’Umuryango, Hub Max, na Nest Thermostats¶

1. Kubera ko Nest ikoresha Konti yawe ya Google, kamera ya Nest canke thermostat yafashwe bisigura ko Konti yawe yose ya Google yahungabanijwe.
2. Ubwo nyene ufungure myaccount.google.com/device-activity -> gusohoka muri mudasobwa, telefone canke ikiganiro cose utamenyereye.
3. Gufungura myaccount.google.com/connections (Iporogarama n'ibikorwa vy'uwundi muntu) -> gukuraho ikiraro cose kitazwi c'inzu y'ubwenge canke ikimenyetso ca OAuth.
4. Gufungura Google Home App -> Amategeko -> Urugo -> ukureho umuntu wese adakwiye kuronka uburenganzira bwo kwinjira mu nzu yawe, hanyuma usuzume Settings -> Works with Google kugira ngo ushireho ubufatanye butazwi.

3. Wyze, Eufy, Arlo, TP-Link Tapo, na Nanit / Owlet Abagenzura abana¶

1. Hindura ijambobanga rya konti yawe ubwo nyene ukoresheje porogarama yawe yo kuri telefone ngendanwa.
2. Gushoboza Iporogaramu y'ukwemeza (TOTP) Ivyemezo vy’ibintu bibiri mu 2019. Account -> Security.
3. Ikintu gihambaye c’ikimenyetso c’igihe ku bikoresho vy’ubuhinga bwa none: Ivyuma bimwe bimwe bitobito vy’abana n’ivy’amafoto y’igicu ntibica bihindura ubusa amasanamu y’amasanamu akora kuri WebRTC / RTSP iyo uhinduye ijambobanga ryawe wenyene.
4. Uko wokwica ku nguvu umugezi ukora kuri kamera iyo ari yo yose iri mu gicu: Uhejeje guhindura ijambobanga ryawe no gukoresha 2FA, fukura/ukureho kamera kuri konti yawe imbere muri app, usubiremwo kamera mu gihe ufashe buto yayo Factory Reset mu masegonda 15, hanyuma uyishire hamwe kuva ku ntango. Gusubira gukorana bitanga ikimenyetso gishasha c'igikoresho c'ubuhinga bwa none n'urufunguzo rw'ikiganiro ca P2P UID, bikagabanya ubudasiba umugezi wose ugumaho.

4. Ecobee, Honeywell Home (Resideo), n'Ivyuma vy'Ubushuhe vy'Ubwenge¶

Niba ubushuhe bwawe buriko burahinduka ubwabwo canke bugaragaza ubutumwa budasanzwe: 1. Ubanze usuzume nimba ishirahamwe ryawe ry’amashanyarazi ryakwandikishije muri porogarama yikora Inyishu y’Ibisabwa / Porogarama y’Ukuzigama kw’Isonga (Eco+ kuri Ecobee canke Seasonal Savings ku Nest) - amashirahamwe ashobora guhindura ubushuhe ku rugero rwa degre 2 gushika kuri 3 (degre 3 gushika kuri 5 Fahrenheit) mu gihe c’isonga ry’uruzitiro kiretse iyo zibujijwe. 2. Iyo thermostat yashizwe ku bushuhe/ubukonje bukaze cane (32°C / 90°F canke 10°C / 50°F) canke PIN-ipfungiwe n’umuterabwoba: ukwegere igipande c’imbere c’ibara ry’umuriro kigororotse ku ruhome (kigaca 24V yaco R/C umurongo w'amashanyarazi maze ugahagarika ifuru/AC ubwo nyene), subiramwo ijambobanga ryawe ry'igicu, gukuraho ubufatanye bwa API bw'uwundi muntu (HomeKit, SmartThings, IFTTT), hanyuma ushireho PIN y’Igenzura ry’Ukwinjira y’imirongo 4 ku gikoresho co gucungera ubushuhe imbere y’uko ugisubiza ku ruhome.

Icigwa ca 4: Gufunga Router yawe yo mu nzu no gukora VLAN y'umushyitsi wa IoT yitandukanije¶

Naho ama server y’igicu y’umucuruzi yoba afise umutekano, kamera canke ikigenzura c’abana cicaye ku nzu imwe . 192.168.1.x Wi-Fi network nk’ama laptops yawe bwite n’ama telefone yawe ni ikibazo gikomeye c’umutekano. Kurikiza izi ntambwe zitanu kugira ngo ukomeze urubuga rwawe rwo muhira mu minota 15:

Intambwe ya 1: Guhagarika UPnP (Universal Plug and Play) Ubudasiba¶

1. Injira muri paji y'umuyobozi wa router yawe (192.168.1.1 / 192.168.0.1 canke biciye ku rubuga rwawe rwa router nka Eero, Google Nest Wifi, TP-Link Deco, Netgear Orbi, UniFi, ASUS).
2. Kugendagenda kuri Advanced -> NAT Forwarding / WAN -> UPnP.
3. Guhindura UPnP ku OFF (Ibibuze) hanyuma ukande Shiraho / Bika.
4. Igituma ivyo ari ngombwa: Na UPnP izimye, nta kamera y’ubuhendanyi, televiziyo y’ubwenge, canke umuduga wa NAS uri mu nzu yawe wigera wemererwa gusaba router gufungura port yinjira ivuye kuri internet ya bose inyuma yawe.
5. Suzuma Port Forwarding / Virtual Servers na DMZ: Suzuma ko imeza y'Irungika ry'Ikivuko iri ubusa (kiretse ukoresheje umukozi w'ivy'ubuhinga bwite utahura) kandi ko DMZ ni ikimuga.

Intambwe ya 2: Suzuma Aderesi yawe ya IP ya bose kuri Shodan.io¶

Ushaka kumenya mu masegonda 10 nimba router yawe yo muhira yariko irashira ahabona kamera iyo ari yo yose, igikoresho co gukurikirana abana, icapa, canke port ya NAS kuri internet ya bose? 1. Gusura whatismyipaddress.com canke ifconfig.me kuva kuri Wi-Fi yawe yo muhira kugira ngo ukope aderesi yawe IPv4 ya bose (nk'akarorero, 203.0.113.45). 2. Genda kuri https://www.shodan.io hanyuma urondere aderesi yawe ya IP ya bose (203.0.113.45). 3. Iyo Shodani avuze ngo "No information available" / 404, router yawe firewall iriko iriba neza ports zose. Niba Shodan atanga urutonde rw'ivyambu vyuguruye (80, 443, 554 RTSP, 1935 RTMP, 8000, 8080, 37777), router yawe yariko irashira ahabona ibikoresho bitaziguye kuri interineti - guhagarika UPnP, gukuraho Imbere y'Ikivuko, no gufungura OFF Remote Web Management (WAN Admin) kuri router yawe irafunga izo ports ubwo nyene.

Intambwe ya 3: Niwimure ama kamera yose, ama moniteur y’abana, n’ibikoresho vy’ubwenge ku kibanza kiri ukwaco Guest Wi-Fi (canke IoT VLAN)¶

Ntukeneye uruhome rw’umuriro rw’ishirahamwe ruzimvye kugira ngo ureme ugucapura kw’urubuga. **99 kw'ijana vy'abakoresha Wi-Fi routers n'imirongo y'urusenga (Eero, Netgear, ASUS, TP-Link, ISP gateways) zifise "Urusobe rwa Wi-Fi rw'abashitsi" rwubakiwemwo rukora nk'urubuga rwa VLAN **: 1. Mu mitunganyirize ya router yawe, fungura 2.4 GHz Urubuga rwa Wi-Fi rw'abashitsi (ruhe izina ry'umwihariko nk' Home_IoT_24 n’inyuguti 16 zikomeye . WPA2/WPA3 ijambobanga ritandukanye cane n’ijambobanga ryawe nyamukuru rya Wi-Fi). 2. Raba neza ko akazu k'ibara kanditsweko "Kwemerera abashitsi kubonana no gushika ku rubuga rwanje rwo mu karere" (Local Network Access / Intranet Access) ni UNCERED (Imugaye) - kenshi yitwa AP Client Isolation. 3. Usubiremwo uruganda rwawe rwo kugenzura umwana, ama kamera y’ubwenge, ama plug y’ubwenge, igikoresho co gukura umwuka, n’igikoresho co gupima ubushuhe, hanyuma ubihuze gusa n’ivyo Guest / IoT Wi-Fi urusobe. 4. Gumana ama laptops yawe bwite, ama PC yo ku biro, amatelefone ngendanwa, ama tablette, n’ububiko bwa NAS ku Irezo yawe nyamukuru ya Wi-Fi. Ubu, naho igikoresho ca IoT kidahenda cane coba gifise urugi rw’inyuma rwa firmware y’umusi umwe, gifatwa mu nzira y’umusenyi ishobora kuvugana na internet gusa kandi ntikishobora kwigera kibona canke ngo gitere mudasobwa zawe.

Intambwe ya 4: Ku ma kamera ya IP rusangi / atagira izina (ONVIF / RTSP), Guhagarika Internet Yabo (WAN) Kuronka vyose¶

Niwakoresha ivy'aho hantu RTSP / ONVIF amafoto n' Home Assistant, Frigate, Scrypted, Blue Iris, canke Synology Surveillance Station, izo kamera ntizikeneye internet na gato: - Mu rupapuro rwa router yawe Firewall / Ubugenzuzi bw'abavyeyi / Ugucungera MAC, ushire kamera aderesi IP ya DHCP idahinduka maze usuzume "Guhagarika gukoresha Internet (WAN Block)" ku bijanye n'aderesi MAC y'iyo kamera. Ico gikoresho gishobora gutanga amasanamu y’agaciro kanini mu karere kawe ku rubuga rwawe rwo mu karere, mu gihe bica bihinduka 100 kw’ijana bidashoboka ko umuntu wese ari hanze y’inzu yawe ashika kuri iyo kamera canke ko iyo kamera ishobora guhamagara muhira ku ma server ya P2P yo mu mahanga.

Icigwa ca 5: Gukomeza ubuzima bwite bw'umubiri ku bigo vy'abana n'ivyumba vyo kuraramwo¶

Nta n’uruhome rw’umuriro rwa porogarama rwo kwizigirwa nk’urw’ubuhinga bwa fizike. Shira mu ngiro aya mategeko ane ku kamera iyo ari yo yose iri mu nzu:

• Ntukigere ushiramwo kamera ya Wi-Fi ifatanye n’igicu imbere mu cumba c’abantu bakuze canke mu bwogero, kandi ushire abana bo mu nzu y’uburezi GUSA ku gitanda: Igikoresho co kugenzura abana gishire hasi kugira ngo imbere gusa mu gitanda c’abana habe mu gicapo - ntukigere ukoresha ameza yo guhinduramwo, intebe y’abana, canke umuryango w’icumba co kuraramwo.
• Guhindurira ku nzira idakoreshwa na Wi-Fi DECT 6.0 canke Digital FHSS Igikoresho co kugenzura abana bo mu nzu y'abana: Ivyuma vy'amasanamu vy'amaradiyo yo mu karere (nk' Infant Optics DXR-8 Pro, Eufy SpaceView uburyo bwo mu karere, VTech non-Wi-Fi, canke Babysense) zifise zero chip ya Wi-Fi, zero konti y’igicu, zero nta n’imwe ishobora gukoresha internet. Kubera ko zitahuye na router yawe canke kuri internet, nta munyaruyeri wo mu kindi gisagara canke mu gihugu ashobora kwigera azikora credential-stuff canke akazifata.
• Koresha igipfukisho c'amatara canke urutonde rw'amashanyarazi y'ubwenge ku ma kamera yo mu nzu yo gusangiriramwo: Gushiramwo ama kamera yo mu nzu canke yo mu nzu y’uburaro mu gikoresho gisanzwe co gupima igihe canke igikoresho c’ubwenge kiva ku mucuruzi atandukanye kugira ngo amashanyarazi agabanuke ku kamera igihe cose uri muhira, canke ugure ama kamera afise igikoresho co gufunga igikoresho co gufunga igikoresho co gukingira amashusho maze kigaca umurongo wa mikro iyo yugarijwe.
• Siga LED yerekana uko kamera imeze (Blue / Red Recording Light) Bishobojwe: Abatera benshi baca baja mu vyo kamera ikoresha maze bagahindukira . Status LED = OFF rero ntuzobona iyo bahuye kugira ngo urabe . Live View. Suzuma amasetingi y’iporogarama yawe y’amasanamu maze ugumize LED yerekana uko ufata amajwi ON, kandi ufunge umwobo wa mikoro n’urudodo rwinshi rw’umuyagankuba nimba utigera ukoresha amajwi y’inzira zibiri.

Inomero z'ivyihutirwa zo mu karere n'amategeko y'ibigo¶

Ugushika ku kamera y’umutekano yo mu nzu canke ku gikoresho co kugenzura abana ata wemerewe ni icaha gikomeye co kwinjira muri orodinateri no kuraba abana. Bimenyeshe ubwo nyene:

• Leta Zunze Ubumwe za Amerika: Hamagara 911 iyo wicura ko hari umuntu yinjiye hafi y’inzu yawe. Gutanga raporo kuri FBI IC3 (ic3.gov) harimwo n'amafoto y'umuntu yinjiye ata wemerewe, aderesi IP, n'ikidodo c'isaha (18 U.S.C. § 1030 CFAA na 18 U.S.C. § 2261A), kandi umenyeshe FTC (ReportFraud.ftc.gov).
• Kanada: Hamagara 911, ushire ikirego kuri polisi hakurikijwe Igice ca 342.1 n’ica 162 (Ugutahura) c’Itegeko Nshinga ry’Igihugu ca Canada*, kandi umenyeshe Ikigo ca Canada kijejwe umutekano wo kuri Internet (cyber.gc.ca).
• Ubwongereza: Hamagara 999 (canke 101 ku bapolisi batari abajejwe ivyihutirwa) no kumenyesha ko umuntu yinjiye ata wemerewe hakurikijwe Itegeko ryerekeye gukoresha nabi mudasobwa 1990 ku Ubuhendanyi bw’Ibikorwa (0300 123 2040 / actionfraud.police.uk).
• Ubumwe bw'Uburayi: Hamagara 112 mu bihugu vyose bigize Umuryango w’Ubumwe bw’Uburayi no gutanga ikirego c’ubugizi bwa nabi ku bapolisi b’igihugu bajejwe ivy’ubugizi bwa nabi ku mbuga ngurukanabumenyi.
• Ostraliya na Nouvelle-Zélande: Hamagara 000 muri Australiya canke 111 muri Nouvelle-Zélande; raporo kuri ACSC (cyber.gov.au / 1300 292 371) canke ICEMETSO NZ (0800 237 869).
• Ubuhinde na Aziya-Pasifike: Hamagara 112 ku bijanye n’inyishu yihutirwa canke 1930 (cybercrime.gov.in) gutanga raporo y’ugukoresha amafoto ata wemerewe hakurikijwe ingingo ya 66 na 66E z’Itegeko ry’Ikoranabuhanga ry’Amakuru, 2000*.

Ibibazo bikunda kubazwa¶

Nomenya gute ko uwo muntu yavuze biciye kuri camera yanje ari umunyaruyeri wo kuri internet vs.¶

Suzuma ibintu bibiri: (1) Woba warasubiyemwo imeyili n'ijambobanga rya konti yawe ya kamera ku yindi mihora utashoboje kwemeza ibintu bibiri (`2FA`)? Na (2) iryo jwi ryavuze iki? Mu bihe birenga 90 kw’ijana aho umuntu atazi avuza induru amajambo atari meza, akavuza umuziki, canke akavuga ko ari “Santa Claus” canke ko ari umunyaruyeri biciye ku . Impeta, Wyze, canke Urusenga kamera, ni igitero co kwuzuza ivyemezo vy'akaryo: ama robots yikoresha yagerageje amamiliyoni y'ama email/ijambobanga ry'amakuru ya kera yasohotse (`haveibeenpwned.com`). non-Wi-Fi radio monitor - uyifate nk’ikintu gigenewe umuntu uzi, uwo mwahora mukundana, canke umubanyi maze ubimenyeshe abapolisi bo mu karere ubwo nyene.

Ni kuki lens ya camera yanje ikoreshwa n’imoteri yihindukiza canke igakanda yonyene mw’ijoro - ivyo vyoba vyama bisobanura ko umunyaruyeri ariko arabiraba?¶

Si ko bimeze - hariho imvo zitatu zituma kamera ikanda canke igenda mw’ijoro ushobora gukuraho umaze gusuzuma amakuru yawe yo kwinjira: (1) Infrared (`IR`) Gukanda akayunguruzo: Iyo umuco wo mu cumba ugabanutse mu gicugu canke igihe itara ry’imbere ry’imodoka rirenga, ikintu gikoreshwa mu buryo bw’ubuhinga kiri imbere muri iyo kamera kiranyuranya mu buryo bw’umubiri akayunguruzo k’umuco w’infrared ku rumuri rufise ijwi ryumvikana . "kanda-kanda" ijwi; (2) Porogaramu yihuta isubiramwo n'ugupima: Hafi y’ibikoresho vyose bikoreshwa n’imoteri (`PTZ`) amafoto (`Wyze Cam Pan`, `Eufy Indoor Cam Pan`, `Tapo`, `Reolink`) bashiramwo ibintu bishasha vy’ubuhinga bwa none hagati ya 2:00 AM na 4:00 AM, kandi iyo basubiye gukora, amamoteri yabo y’inzira y’amaguru aca azunguruka ubwayo degre 360 ​​kuva ibubamfu aja iburyo no kuva hejuru gushika hasi kugira ngo bamenye aho bari mu nzu; na (3) Gukurikirana inyigisho yikora: Iyo "Motion Tracking" ikoreshejwe muri app, umuyaga wo mu gisenge, igikoko co mu nzu, canke umukungugu uri imbere y'itara ry'infrared birashobora gutuma iyo lens igendagenda mu cumba cose. Suzuma porogaramu yawe Ibikoresho vyemewe urutonde n'ikidodo c'igihe co guhindura porogaramu kugira ngo wemeze.

Noshobora guhatira uwugurisha amafoto yanje (Ring, Wyze, Nest, Arlo, Nanit) ngo umbwire IP address y’umuntu yinjiye muri konti yanje akavugana n’umwana wanje?¶

Egome. Naho ikigaragaza c’ishimikiro c’iyi porogarama coba kigaragaza gusa ubwoko bw’igikoresho (nk’akarorero "Khrome kuri Windows" canke "ifone") n’igisagara hafi, ivyemezo vy’inyuma vy’umucuruzi n’abakozi b’ivy’amakuru ba WebRTC bandika ivy’ukuri inkomoko IPv4/IPv6 aderesi, User-Agent urudodo, ikiganiro co gutangura/iherezo ry'igihe, n'inzira zibiri z'ijwi. Ubwo nyene ufungure itike y’ugushigikira n’Ishirahamwe ry’Umutekano / Ubuzima bwite ry’umucuruzi ubasabe kubika ivyemezo vyose n'inyandiko z'ibiganiro vya WebRTC kuri konti yawe, kandi icarimwe ugatanga raporo y’abapolisi bo mu karere be n’Igisabwa co Gushikira Ivyerekeye GDPR/CCPA (`DSAR`) ku mateka yose y'injira ya konti yawe.

Mbega igikoresho co kugenzura abana kivuga ngo "2.4 GHz FHSS" kiratekanye abasuma ba kuri internet?¶

Ego, kuva interineti abasuma: umuntu yiyemeje 2.4 GHz FHSS (Frequency-Hopping Spread Spectrum) igikoresho kizanana n’igicapo caco c’umuvyeyi gifatwa mu minwe kandi kitagira igice ca Wi-Fi canke porogarama ya telefone ngendanwa, kirashobora gukingira 100 kw’ijana abasuma bo kuri internet, gushiramwo amakuru y’ivy’ubuhinga, n’ubugoyagoye bwa router. Ariko rero, amasanamu y’amajwi atari menshi canke ya kera atagira amakuru ashobora rimwe na rimwe gufata amajwi makeyi y’iradiyo canke amajambo y’umusaraba avuye ku kindi kigenzura c’abana, telefone idakoresha umugozi, canke iradiyo y’abanyabwenge mu 1990. 90 gushika ku metero 300 (amafuti 300 gushika ku 1.000). Digital ya none UKUBOZA 6.0 canke AES-128 amamoniteri ya FHSS afise amakuru y’ibanga arabuza gukoresha amakuru y’iradiyo mu buryo busanzwe.

Iyo nkuyeho kamera gusa ijoro ryose nkayisubiramwo ejo ntahinduye ijambobanga ryanje, uwo munyavyaha yoba arakurwako?¶

Oya. Gukuraho kamera bica gusa umuriro mu gihe umugozi uri hanze y’uruhome. Millisegonda uzosubira gushiramwo kamera ejo utasubije inyuma ibiganiro, utahinduye ijambobanga ryawe ryo mu gicu, utafunguye 2FA, canke utazimye router UPnP, iyo kamera isubira kwifatanya n’iyo konti nyene y’igicu (aho telefone y’uwuyiteye iguma yinjiye maze igaca ironka itangazo ry’uko kamera yawe isubiye ku rubuga). Ntukigere usubiramwo kamera yacitse intege gushika uhejeje Ivyigwa vya 3 n’ivya 4 biri hejuru.

Bimeze gute iyo uwo twahora bubakanye amugirira nabi ashiraho . Ring, Nest, canke Eufy cameras igihe twaba kumwe kandi konti ya "Nyene / Umuyobozi wa mbere" iri muri email YABO?¶

Mu bidukikije vyo mu nzu y'ubwenge nk' Impeta, Urusenga, Arlo, na Eufy, "Ukoresha Asangiye" ntashobora gukuraho canke kwirukana konti ya "Nyir'Ibanze" - kandi naho wokanda buto y'Ihinguriro ry'Igihugu ku kamera ya Ring canke Arlo, inomero y'urutonde/aderesi ya MAC y'igikoresho iguma yugarijwe mu buryo bw'ibanga (`Device Theft / Ownership Lock`) kuri konti y'umwimerere ya Nyir'ivyo bikoresho gushika bakoze kuri "Kuraho igikoresho" muri porogarama yabo. Nimba uwo mwahora mukundana akugirira nabi ari we yanditswe afise amakamera, inkengeri z’umuryango canke amafunguro y’ubwenge yo mu nzu yawe, gukuraho umuriro no gukuraho ama kamera yabo ubwo nyene, ubisubirize n’ibikoresho vyanditswe gusa kuri konti yawe nshasha ya imeyili, hanyuma uhindure izina ry’urubuga rwawe rwa Wi-Fi rwo mu nzu (`SSID`) n’ijambobanga kugira ngo ibikoresho vyabo vya kera ntibishobore kwigera bisubira gukorana.

Inyobora zifitaniye isano¶

• Hack y'inzu y'ubwenge, kwiba kamera, n'ubuhinga bwo gukurikirana
• Gukingira ama router yo mu nzu n'ibikoresho vya IoT
• Ugushiramwo ivyemezo vy'ubudahemuka, amakarita y'ingabirano, na konti
• Inzu canke ibiro bito NAS (QNAP/Synology) n'icuma ca UPnP gihagaze
• DNS kwiba, ISP router WAN gusubira gutunganya, no guhenda urugi rw'inyagano
• Inomero z'ivyihutirwa hakurikijwe igihugu

Amasoko n'ubuyobozi buzwi¶

• Ibiro vya Leta Zunze Ubumwe za Amerika bijejwe iperereza (FBI) (Leta Zunze Ubumwe za Amerika): Itangazo ry'Igikorwa ca Leta I-123020-PSA & Impanuro za Smart Home IoT: Gukingira ama kamera y'ubwenge, ama moniteur y'abana, n'abafasha ijwi ku bijanye n'ugushiramwo amakuru n'ugufata "Swatting" Hijacks.
• Ikigo kijejwe umutekano wo kuri Internet n’ibikorwa remezo (CISA) & Ikigo c'Igihugu c'Umutekano (NSA) (Leta Zunze Ubumwe za Amerika): * Urupapuro rw’amakuru yerekeye umutekano wo kuri interineti: Gucungera imihora y’ubuhinga bwa none, guhagarika UPnP, no gucapura ibikoresho vyo mu nzu vy’IoT ku VLAN z’abashitsi*.
• Komisiyo y'ubudandaji ya Leta Zunze Ubumwe za Amerika (FTC) (Leta Zunze Ubumwe za Amerika): Gukoresha neza ama kamera ya IP n’ibikoresho vyo kugenzura abana bifatanye na Internet.
• Ikigo c'igihugu kijejwe umutekano wo kuri Internet (NCSC) (Ubwongereza): Ibikoresho vy'ubwenge mu rugo: Gushiraho ama kamera, ama moniteur y'abana, n'ama speaker y'ubwenge mu buryo butekanye & Itegeko ry'umutekano w'ibicuruzwa n'ibikorwa remezo vy'itumanaho (PSTI) Impanuro.
• Ikigo c’Ubumwe bw’Uburayi kijejwe umutekano wo kuri Internet (ENISA): Ingingo ngenderwako zo gucungera Internet y'ibintu (IoT) n'ugucapura urubuga rwo mu rugo.