Skip to content

Mumwe Munhu Achitaura Kuburikidza Nemwana Wako Monitor kana Smart Chengetedzo Kamera: Pakarepo Shutdown uye Network Isolation

Nhamba dze emergency dzinosiyana nenyika. Iri peji rinoshandisa 911, nhamba yeUnited States neCanada. Dzimwe nyika dzakawanda dzinoshandisa 112, 999, kana imwe nhamba. Tsvaga nhamba yenyika yako.

Kunzwa izwi remuenzi richitaura kuburikidza neWi-Fi yemwana wako yekutarisa (Nanit, Owlet, Eufy, VTech, Lollipop, Motorola), vachiona zviri mumba Ring, Wyze, Arlo, Blink, Google Nest, kana TP-Link Tapo kamera ine mota pan-and-tilt lens inotenderera mukamuri yako yekurara iri yega, ichiona kamera yebhuruu/tsvuku chimiro LED ichivhenekera na2:00 AM, kana kuwana yako. Ecobee / Nest smart thermostat yakanyura kusvika pa32 degrees Celsius (90 degrees Fahrenheit) kupindirwa kunotyisa mumba mako. Zvakadaro, kunze kwekunge mutorwa ari kunze kwemasuo ako, ** iyi ingangogara iri kure-akaundi yegore kana router port-forwarding intrusion pane kuti munhu amire kunze kwehwindo rako **. Zvinopfuura makumi mapfumbamwe muzana ekubiwa kwekamera yezwi-mbiri kunoitika mune imwe yenzira mbiri: (1) Automated Credential Stuffing (apo matsotsi anotora email yekare nepassword zvawakashandisa zvekare panzvimbo yekutengesa yakatyorwa vozvipa mubhoti rinopinda mukati mako. Ring, Wyze, Nest, kana kuti mwana anotarisisa gore app kubva kuzviuru zvemakiromita kure), kana **(2) Yakananga Local IP / UPnP Port Forwarding Exposure ** (uko isina kurongeka generic IP kamera kana network vhidhiyo rekodhi. NVR kushandiswa UPnP kuvhura chiteshi 554 RTSP, 80, kana 8000 yakananga painternet yeruzhinji uye yakanyorwa ne Shodan.io injini yekutsvaga). Kuti uomese router kumba, bvunzawo kuchengetedza ma routers epamba uye IoT zvishandiso; kana uchifungidzira kuti waichimbova mudiwa wako kana munhu anokushungurudza mumba ari kudzora kiyi nemarambi emba yako yose, maona smart home hack, kubiwa kwekamera, uye stalkerware; kana kana mudziyo wako wekuchengetera weNAS wakarohwa padivi pemakamera ako, tarisa yakakanganisa imba kana hofisi diki NAS uye UPnP shutoff. Kana iwe ukanzwa tsoka dzemuviri, ukaona mumwe munhu panzvimbo yako, kana kutya kuchengetedzeka kwemhuri yako nekukurumidza, fonera nhamba yako ye emergency (911 muUnited States neCanada, 112 muEuropean Union, 999 muUnited Kingdom) ipapo kana bvunza dhairekitori redu repasi rose re nhamba dze emergency.

Ita izvi ikozvino

  1. Dhonza tambo yemagetsi kubva kumashure kwechekitari yemwana kana kamera yemukati (uye buritsa chero bhatiri remukati rekuchengetedza) mukati memasekonzi mashanu:
  2. Usaita ** usatambise nguva kuvhura iyo foni app kudzima kamera "Kudzima" musoftware - munhu anorwisa ane manejimendi ekutonga kwegore account anogona kushandura software "Yakavanzika Mode" kudzoserwa musekondi 1, uye mamwe makamera akakanganiswa anoenderera mberi nekutepfenyura odhiyo kunyangwe iyo app inoratidza vhidhiyo yekudya yambomira. Dhonza chivharo chemadziro kana USB-C tambo yemagetsi kunze kwekamera nekukurumidza.
  3. Tarisa imwe yega yega yemukati yeWi-Fi kamera mumakamuri ako ekurara, mukireshi, nenzvimbo dzekugara uye udzibudise futi. (Siya kunze kwenzira yekutyaira/mabhero epagonhi akabairwa chete mushure mekunge watarisa kana mumwe munhu ari kunze kwemba yako.)
  4. ** Usarove iyo hardware "Factory Reset" pinhole bhatani pane kamera kana kuti tangazve yako Wi-Fi router parizvino **:
  5. Kudzvanya Factory Reset pakamera kana kuburitsa imba yako yeWi-Fi router ** inopukuta matanda eRAM anoputika (DHCP leases, UPnP port mappings, NAT connection tables, uye zvichangobva kuitika zvegore zviitiko)** zvinoratidza IP kero yeanorwisa, chitambi chenguva, uye kuti munhu anorwisa akapinda here neakaundi yako yegore kana kuti netiweki yako yeWi-Fi.
  6. ** Vhura nharembozha yekamera yako (Ring, Wyze, Nanit, Eufy, Arlo, Nest / Google Home) uye tora zvidzitiro zve "Akatenderwa / Akapfigirwa-Madhiza" uye "Vakagovaniswa Vashandisi" USATI wabvisa ivo **:
  7. Tarisa pasi Account Settings -> Authorized Client Devices / Login Activity / Shared Users. Screenshot yega yega mudziyo modhi (iPhone 15, Web Browser - Chrome on Windows, Android Emulator), nzvimbo, uye timestamp yemushumo wako wemapurisa.
  8. Tinya ipapo ** Bvisa / Pinda kunze kweMidziyo Yese **, bvisa chero isingazivikanwe ** Vakagovaniswa / Vashanyi Vanoshandisa , shandura password yeakaundi yako kuti ive nyowani 16+ mavara akasiyana password, uye batidza ** Mbiri-Factor Authentication (2FA) uchishandisa Authenticator App (usambofa SMS kana email kana app ichitsigirwa).
  9. ** Tarisa kana mwana wako wekutarisa ari chaizvo isiri-Wi-Fi redhiyo yekutarisa (FHSS 2.4 GHz kana DECT 900 MHz) vs. Wi-Fi Cloud Monitor**:
  10. ** Musiyano wakakosha wekuchengetedzwa kwemuviri **: Kana mwana wako anotarisisa asina ** Wi-Fi uye asina smartphone app ** (ingori yakazvitsaurira yevabereki skrini uye kamera unit inoshandisa. 2.4 GHz FHSS kana redhiyo yeanalogi), ** haigone kubatika painternet **. Inzwi rinouya neparedhiyo isiri yeWi-Fi redhiyo rinobva mukati me 90 kusvika 300 metres (300 kusvika 1,000 tsoka) pemba yako - kungave netsaona kutaura-mukana kubva kumuvakidzani mucheche wemonitor/walkie-talkie pane imwechete frequency chiteshi, kana mumwe munhu akamira panze aine redhiyo inofambisa. Kana izwi raitaura zvakananga kumwana wako paredhiyo isiri-Wi-Fi, kiya mikova yako uye fonera mapurisa ekukurumidzira (911 / 999 / 112) pakarepo.
  11. ** Pinda muImba yako Wi-Fi router (192.168.1.1 kana 192.168.0.1) wobva wadzima UPnP (Universal Plug and Play) uye bvisa chero zvisingazivikanwi Port Forwarding mitemo**:
  12. Yakachipa kana chena-label P2P kamera (VStarcam, Foscam, Tenvis, Hikvision, Dahua, CamHi) kushandisa UPnP kubaya chinyararire madoko akazaruka (554, 80, 8000, 37777) pane yako router firewall kuitira chero munhu Shodan.io unogona kuona uye kutaura kuburikidza nekamera usingatombode password yako yeWi-Fi.
  13. ** Fambisa makamera ese, vana monitors, smart thermostats, uye smart speaker kubva paWi-Fi yako yemba yekutanga uye uende kune imwe yega. Guest Wi-Fi Network (kana yakatsaurirwa IoT VLAN pamwe Client Isolation inogoneswa)**:
  14. Kunyangwe smart plug, robhoti vacuum, kana yemwana yekutarisa ikasangana nenjodzi yegore mune ramangwana, kuimisa paMuenzi Wi-Fi VLAN inodzivirira mudziyo wakakanganisika kubva pakuvheneka kana kurwisa malaptops ako ebasa, mafoni, kana NAS drive yekumba.

Danger

** Kana iwe wakashandisa zvakare email yakafanana nepassword pane yako Ring, Wyze, Arlo, Eufy, kana Nanit Kamera account yaunoshandisawo yako Email (Gmail / Yahoo / Outlook) Chinja yako yekutanga email password, Amazon password (ye Ring / Blink / Echo), uye password yeGoogle (ye Nest), uye tarisa email yako inbox's Trash / Vakavharirwa Senders / Forwarding Rules - vanorwisa vanogara vachigadzira email sefa mubhokisi rako rekunyora kuti vadzime otomatiki "Chishandiso chitsva chakapinda muRing/Nest account yako" email yambiro yekuzivisa saka hauna kumbovaona vachipinda.


Muti wesarudzo: mhinduro yekukurumidza kana mutorwa achitaura kana kufambisa kamera yekumba

Tevedza uyu muti wesarudzo mukati mekutanga 2 maminetsi echiitiko kuti uongorore kuchengetedzeka kwemuviri, chengetedza humbowo, uye kuvharira kunze muparadzi:

flowchart TD
    Start["Inzwi reMutorwa Rinonzwika Kuburikidza Nemucheche Monitor / Smart Kamera, kana Kamera Lens Inofambiswa Payo Payo."] --> UnplugNow["STEP 1 (0 kusvika 5 Sekondi): Panyama Bvisa Tambo Yemagetsi (uye Bvisa Bhatiri) Kubva Kamera Pakarepo"]

    UnplugNow --> MonitorType{"Iyi Monitor Inobatana neWi-Fi / Smartphone App, kana Iyo Yakatsaurirwa Yemunharaunda Radio Monitor (Hapana Wi-Fi)?"}

    MonitorType -->|"Hapana Wi-Fi / Hapana App (Yakatsaurirwa 2.4 GHz FHSS kana Analog Parent Screen)"| RadioAlert["PROXIMITY ALERT: Chiratidzo Chakabva Mukati 90 kusvika 300 Mamita (300 kusvika 1,000 Feet) yeImba Yako."]
    RadioAlert --> TalkDirect{"Inzwi Rakataura Rakananga Kukamuri Yako/Kumwana, kana Kunzwika Senge Random Muvakidzani/CB Cross-Talk?"}
    TalkDirect -->|"Akataura Zvakananga / Zvakaipa"| CallPoliceNow["Kiya Magonhi & Windows Pakarepo uye Dana 911 / 999 / 112 yeExterior Police Patrol Check"]
    TalkDirect -->|"Muchidimbu Muvakidzani / Walkie-Talkie Cross-Talk"| RePairChannel["Re-Pair Parent Unit & Camera Kutenderedza FHSS Hopping Mbeu kana Chinja kuDECT 6.0Encrypted Monitor"]

    MonitorType -->|"Wi-Fi / Cloud App Kamera (Ring, Wyze, Nanit, Eufy, Nest, Arlo, Generic RTSP)"| CloudVsLocal{"Mupambi Akasvika Sei Pakamera?"}

    CloudVsLocal -->|"Vector A: Cloud Account Credential Stuffing (90% yeRing / Wyze / Nest / Nanit Cases)"| CloudLockdown["1. Screenshot Authorized Devices & Event History muApp -> 2. Bvisa All Sessions -> 3. Reset Password + Enable Authenticator 2FA"]

    CloudVsLocal -->|"Vector B: UPnP / Port Forward / Shodan Yakananga IP Stream (Generic ONVIF / RTSP / Foscam / Hikvision)"| RouterLockdown["1. Screenshot Router UPnP & Port Forward Table -> 2. Dzima UPnP & Delete Port Forward -> 3. Vhara Kamera WAN Access muFirewall"]

    CloudVsLocal -->|"Vector C: Aimbove Mushandi / Aimbove Muenzi Wepamba / Akagovaniswa Akaundi Yemba"| SharedLockdown["1. Ongorora 'Vashandisi Vakagoverwa / Nhengo dzeMhuri' muApp -> 2. Shandura Wi-Fi SSID & WPA2/WPA3 Password -> 3. Rota patsva pafekitari & sungazve Kamera kuakaundi Itsva"]

    CloudLockdown --> VLANIsolate["Yekupedzisira Danho: Gadzira Isolated Guest / IoT Wi-Fi Network (Client Isolation ON) uye Batanidza Chete Akakosha Patched Devices"]
    RouterLockdown --> VLANIsolate
    SharedLockdown --> VLANIsolate

Chikamu chekutanga: Kuongorora kuti munhu anorwisa akapinda sei mukamera yako kana thermostat

Usati wagadziridza fekitori chero chinhu, tarisa kuti ndeipi ye**nzira ina dzekupindira ** dzakashandiswa nemurwi. Izvi zvinokuudza kana munhu anorwisa aingove nekuwana kune imwechete yegore kamera app kana kuti yako yese Wi-Fi network yakakanganiswa.

Intrusion Vector Zvishandiso Zvinonyanya Kubatwa Mawaniro Akaita Murwisi Forensic Clue yekusimbisa Iyi Vector
1. Cloud Account Credential Stuffing (Reused Breached Password + No 2FA) Ring, Blink, Wyze, Arlo, Eufy, Nanit, Owlet, Google Nest, Ecobee, TP-Link Tapo / Kasa. Iwe wakashandisa email nepassword pane yako kamera app iyo yakaburitswa makore apfuura mukutyora-bato rechitatu data (haveibeenpwned.com) Automated botnets (Sentry MBA / OpenBullet) yakaedza password iyo paAPI yemutengesi wekamera, yakapinda, uye yakatengesa yako yekushanda kamera kupinda pane yakasviba-web/Teregiramu runyorwa rwemadhora 1 kusvika kumadhora mashanu. Kamera app yako Authorized Devices / Control Center inoratidza foni yaasingazivi (Xiaomi, Samsung, iPhone, Web) yakapinda muakaundi yako, KANA email yako Trash folda ine yakadzimwa "Itsva yekupinda kune yako kamera account" email.
2. UPnP & Vhura Port Forwarding (RTSP Port 554, HTTP Port 80/8000/8080, P2P UID) Generic/white-label Amazon makamera (VStarcam, Wansview, SV3C, Foscam), Hikvision, Dahua, Amcrest, Reolink (kana UPnP yakagoneswa). Payakaiswa, kamera yakatumira a UPnP IGD chikumbiro kune yako router yekumba uchikumbira iyo router kuti itumire yeruzhinji internet port 554 kana 8000 zvakananga ku 192.168.1.x. Tsvaga injini senge Shodan.io uye Censys.io tarisa iyo yese IPv4 internet zuva nezuva uye indekisi yakavhurika kamera ine default admin:admin kana admin:12345 magwaro. Kupinda murouter yako yekumba (192.168.1.1) nekuvhura UPnP kana Port Forwarding inoratidza inoshanda ekunze chiteshi mepu inongedza kune yako kamera IP kero.
3. Unrevoked Shared User, OAuth Smart-Home Link (Alexa / Google Home / HomeKit), kana Ex-Partner Token Google Home, Amazon Alexa, Apple Home, Ring Shared Users, Ecobee, Honeywell Home, SmartThings. Waimbova mudiwa, waunogara naye, mureri wevana, anofamba nembwa, muenzi/muenzi weAirbnb, kana muridzi wemba aimbove achine Nhengo Yemba / Yakagovaniswa Kuwana, kana kubatanidza hunyanzvi hwekamera yako kune * yavo* Alexa/Google Home account makore apfuura. Hapana pasiwedhi nyowani yakaitika, asi Shared Users / Home Members / Linked Works With Alexa/Google Services inoratidza yechipiri account kana yechitatu-bato kubatanidzwa kuchiri kubatanidzwa.
4. Yakakanganiswa Imba Wi-Fi Password (WPS PIN Brute-Force kana Wi-Fi Yakagoverwa) Local-chete ONVIF makamera, Chromecast, AirPlay vatauri, Sonos, Matter / yemuno hub zvishandiso. Mumwe munhu ari mukati memamita makumi matanhatu (200 tsoka) yemba yako akatsemura isina kusimba password yeWi-Fi, akabiridzira inoshanda. WPS push-bhatani PIN pane yako router, kana kutoziva password yako yeWi-Fi uye yakabatana nechiteshi chemuno 554/8008. Router yako Connected Clients / DHCP Lease Table inoratidza isingazivikanwe MAC kero uye zita rekutambira rakabatana zvakananga kune yako yemuno Wi-Fi (WLAN)

Chikamu Chechipiri: Kuchengetedza Humbowo Usati Wagadzirisa Patsva (Maminitsi 2 kusvika 15)

Kana munhu wausingazive akataura nemwana wako, akashungurudza mhuri yako, kana kusora muimba yekurara, chiito ichocho imhosva yakaipa kwazvo yekupinda nekombiyuta. ** Mirira maminetsi gumi kuti utore izvi zvimedu zvina zvehumbowo hwedhijitari usati wapukuta kana kudzima maakaundi **, nekuti kana ukangodzima chishandiso kubva kune yako gore app, maseva egore emutengesi anowanzo bvisa matanda ezviitiko akabatana nemavhidhiyo nekukurumidza:

  1. ** Dhawunirodha Vhidhiyo/Odhiyo Clip kubva kuKamera's Cloud Timeline nekukasira **:
  2. Yakanyanya kufamba-yakagadzirwa uye inoenderera-inorekodha makamera (Ring, Nest Aware, Wyze Cam Plus, Nanit, Arlo, Eufy) rekodha kubuda kwayo kwemutauri uye maitiro emukamuri kana kutaura-nzira mbiri (Live View) inovhurwa.
  3. Vhura iyo nhoroondo yenguva muapp kune iyo miniti chaiyo yawakanzwa izwi, ** dhawunirodha iyo .mp4 clip kune yako foni yemuno kamera roll **, uye zvakare rekodha-rekodha chiitiko chenguva chinoratidza chaiyo chidhindo chenguva (HH:MM:SS netimezone).
  4. ** Screenshot iyo Kamera App's "Akatenderwa Midziyo" uye "Vakagovaniswa Vashandisi" runyorwa **:
  5. Mumhete: Menu (≡) -> Control Center -> Authorized Client Devices UYE Shared Users.
  6. Mu Wyze: Account -> Security -> Manage Devices / Two-Factor Authentication UYE Account -> Sharing.
  7. MuGoogle Nest / Google Home: Shanyira myaccount.google.com/device-activity uye vhura Google Home -> Settings -> Household.
  8. MuArlo: Settings -> Profile -> Login Settings -> Trusted Devices UYE Settings -> Grant Access.
  9. ** Chengetedza yako Imba Router's System Log, DHCP Client Table,uye UPnP Table**:
  10. Pinda muwebhu router yako (http://192.168.1.1, http://192.168.0.1, kana http://10.0.0.1)
  11. Enda ku Administration / System Log -> tinya Chengetedza / Export Log (iyi mameseji faira inorekodha inbound WAN yekubatanidza, UPnP port-mepu zvikumbiro, uye yemuno Wi-Fi MAC zviitiko zvekusimbisa).
  12. Tora skrini ye DHCP Leases / Attached Devices rondedzero (kunyanya kucherechedza IP yemuno neMAC kero yemucheche yekutarisa / kamera) uye iyo UPnP / Port Forwarding peji.
  13. Chengetedza Iyo Yemuviri Kamera's Serial Nhamba, MAC Kero, uye MicroSD Kadhi:
  14. Kana iyo kamera ine yemuviri ** MicroSD kadhi slot ** padivi kana pasi (Wyze, Eufy, Tapo, Reolink, Foscam), ** buritsa kadhi reMicroSD kunze apo kamera isina kuvharwa ** uye tsvedza chivharo chekunyora kana kukopa zvirimo pakombuta yakachena - makamera mazhinji anonyora emunharaunda .mp4 zvikamu uye zvemunharaunda syslog.txt diagnostics faira yakananga kune SD kadhi kunyangwe munhu anorwisa akadzima gore clip.

Chikamu chechitatu: Kudzinga Anorwisa kubva kuMaakaundi Yako Cloud (Brand-by-Brand Matanho)

Kana uchinge wachengeta zvidzitiro zvezvishandiso zvisina kutenderwa, ita chikamu chakazara kuuraya mukati mekamera yako, mutauri akangwara, uye thermostat mapuratifomu:

1. Amazon Ring, Blink,uye Echo / Alexa (Nzira mbiri "Drop In" Hijacks)

  • **MuRing App **:
  • Vhura Menu (≡) -> Control Center -> Authorized Client Devices -> tinya "Bvisa Zvese Zvishandiso".
  • Tap Control Center -> Shared Users -> bvisa chero mushandisi wausingazive.
  • Tap Control Center -> Account Verification -> chinja maviri-Factor Authentication kubva ku **SMS Text ** kuenda ku ** Authenticator App **. 4.Tap Control Center -> Amazon Account Linking uye tarisa kana isingazivikanwe Amazon account yakabatana.
  • MuAmazon Alexa App (Yakakosha kana izwi rakauya kuburikidza neEcho Dot / Echo Show):
  • Mazhinji "smart speaker voice intrusions" anoitika nekuti nhengo yemhuri, aimboshanda naye, kana anorwisa akagonesa Alexa "Drop In" (inoshandura mutauri weEcho kuita intercom yenzira mbiri pakarepo pasina ari mukamuri anopindura).
  • Vhura iyo ** Alexa App -> Zvishandiso -> sarudza yako Echo speaker -> Settings (giya icon) -> Kukurukurirana -> Drop In ** -> isa ku Off (kana My Household Only)
  • Visit amazon.com -> Account & Lists -> Login & Security -> shandura password yako uye enda ku Manage Your Content and Devices -> Devices kudzima chero isingazivikanwe Echo, Fire piritsi, kana Alexa app kuisirwa.

2. Google Nest Makamera, Doorbells, Hub Max, uye Nest Thermostats

  1. Nekuti Nest inoshandisa Akaundi yeGoogle yako, Nest kamera yakabiwa kana thermostat zvinoreva Akaundi yako yose yeGoogle yakanganiswa.
  2. Pakarepo vhura myaccount.google.com/device-activity -> saina kunze komputa yega yega, foni, kana chikamu.
  3. Vhura myaccount.google.com/connections (Yechitatu-bato mapurogiramu & masevhisi) -> bvisa chero isingazivikanwe smart-pamba zambuko kana OAuth tokeni.
  4. Vhura Google Home App -> Settings -> Vemba -> bvisa chero munhu asingachafaniri kuwana imba yako, uye tarisa Settings -> Works with Google kusunungura kusabatanidzwa kusingazivikanwe.
  1. Chinja password yeakaundi nekukurumidza kubva kune yako mobile app.
  2. Gonesa **Authenticator App (TOTP) Mbiri-Factor Authentication ** mukati Account -> Security.
  3. ** Yakakosha chikamu-chiratidzo quirk pane bhajeti IoT maapplication **: Mamwe madiki etarisiro emwana uye IP kamera Cloud backend ** usaite kukurumidza kushanda anoshanda WebRTC / RTSP vhidhiyo hova paunochinja password yako wega **.
  4. **Maitiro ekumanikidza-kuuraya rwizi rwuri kushanda pane chero cloud kamera **: Mushure mekushandura password yako uye kugonesa 2FA, dzima/bvisa kamera kubva kuaccount yako mukati meapp, batanidza kamera mukati wakabata Factory Reset bhatani kwemasekonzi gumi nemashanu, uye batanidza kubva pakutanga. Re-pairing inogadzira ** brand-nyowani cryptographic mudziyo tokeni uye P2P UID chikamu kiyi **, ichicheka zvachose chero rwizi runorembera.

4. Ecobee, Honeywell Home (Resideo), uye Smart Thermostats

Kana tembiricha yako ye thermostat ichichinja yega kana kuratidza mameseji asinganzwisisike: 1. Chekutanga tarisa kana yako magetsi ekushandisa yakanyoresa iwe mune otomatiki ** Demand Response / Peak Saver chirongwa** (Eco+ paEcobee kana Seasonal Savings paNest) - zvishandiso zvinokwanisa kugadzirisa tembiricha zviri kure ne2 kusvika 3 madhigirii Celsius (3 kusvika 5 madhigirii Fahrenheit) panguva yegridi yepamusoro kunze kwekunge yakaremara. 2. Kana iyo thermostat yakanyungudutswa kusvika pakupisa kwakanyanya / kutonhora (32°C / 90°F kana 10°C / 50°F) kana PIN-yakakiyiwa neanorwisa: dhonza iyo thermostat faceplate yakananga pamadziro (iyo inocheka yayo 24V R/C waya yemagetsi uye inomisa choto / AC nekukurumidza), gadzirisazve password yako yegore, bvisa yechitatu-bato API kubatanidzwa (HomeKit, SmartThings, IFTTT), uye isa 4-manhamba Kupinda Kudzora PIN pane thermostat unit usati waidzosera kumadziro.


Chikamu chechina: Kukiya Pazasi Imba Yako Router & Kugadzira Isolated IoT Muenzi VLAN

Kunyangwe kana maseva emutengesi egore akachengeteka, kamera kana mwana wekutarisa akagara pafurati imwechete 192.168.1.x Wi-Fi network seyako malaptop uye mafoni injodzi huru yekuchengetedza. Tevedza aya matanho mashanu kuti uomese network yako yekumba mumaminetsi gumi nemashanu:

Danho 1: Dzima UPnP (Universal Plug and Play) zvachose

  1. Pinda mune yako router admin peji (192.168.1.1 / 192.168.0.1 kana kuburikidza neyako mesh router app senge Eero, Google Nest Wifi, TP-Link Deco, Netgear Orbi, UniFi, ASUS)
  2. Enda ku Advanced -> NAT Forwarding / WAN -> UPnP.
  3. Toggle UPnP ku OFF (Yakaremara) uye tinya ** Nyorera / Sevha **.
  4. Nei izvi zvichikosha: With UPnP yakadzimwa, hapana hutsinye kamera, smart TV, kana NAS drive mukati memba yako inombotenderwa kubvunza router kuti ivhure inbound port kubva kune yeruzhinji internet kumashure kwako.
  5. Tarisa Port Forwarding / Virtual Servers uye DMZ: Tarisa kuti iyo Port Forwarding tafura haina zvachose (kunze kwekunge iwe uchimhanyisa nemaune yakazvigashira sevha yaunonzwisisa) uye izvo DMZ yakaremara.

Nhanho yechipiri: Tarisa Yako Yeruzhinji IP Kero pa Shodan.io

Unoda kuziva mumasekonzi gumi kana router yako yekumba yaifumura chero kamera, mucheche wekutarisa, printer, kana NAS port kune yeruzhinji internet? 1. Visit whatismyipaddress.com kana ifconfig.me kubva kumba kwako Wi-Fi kutevedzera yako yeruzhinji IPv4 kero (semuenzaniso, 203.0.113.45) 2. Enda ku https://www.shodan.io uye tsvaga yako yeruzhinji IP kero (203.0.113.45) 3. Kana Shodan akati "No information available" / 404, yako router firewall iri kuba nemazvo madoko ese. Kana Shodan achinyora madoko akavhurika (80, 443, 554 RTSP, 1935 RTMP, 8000, 8080, 37777), router yako yaifumura zvishandiso zvakananga kuinternet - ichidzima UPnP, kudzima Port Forwards, uye kudzima ** OFF Remote Web Management (WAN Admin)** parouter yako inovhara izvo zviteshi nekukasira.

Nhanho 3: Fambisa ese Makamera, Vacheche Monitors, uye Smart Devices pane Isolated Guest Wi-Fi (kana IoT VLAN)

Iwe haudi inodhura bhizinesi firewall kugadzira network segmentation. ** 99 muzana yevatengi veWi-Fi routers uye mesh masisitimu (Eero, Netgear, ASUS, TP-Link, ISP gateways) ine yakavakirwa-mukati "Guest Wi-Fi Network" inoita seVLAN iri yoga**: 1. Muzvirongwa zve router yako, shandisa 2.4 GHz Guest Wi-Fi Network (ipe zita rakatsaurirwa senge Home_IoT_24 uye yakasimba 16-mavara WPA2/WPA3 password yakasiyana zvachose kubva kune yako huru Wi-Fi password). 2. Ita shuwa kuti cheki bhokisi rakanyorwa "Rega vaenzi kuonana uye kuwana network yangu yemuno" (Local Network Access / Intranet Access) is UNCHECKED (Yakaremara) - inowanzonzi AP Client Isolation. 3. Factory-reset mwana wako monitor, smart cameras, smart plugs, robhoti vacuum, uye smart thermostat, uye zvibatanidze ** chete kune Guest / IoT Wi-Fi network**. 4. Chengetedza makomputa ako ega ega, maPC edesktop, mafoni, mahwendefa, uye NAS chengetedzo pane yako Main Wi-Fi Network. Ikozvino, kunyangwe mudziyo wakachipa weIoT uine zero-day firmware backdoor, yakavharirwa mujecha rejecha iro rinogona kungotaura neinternet uye risingamboone kana kurwisa makomputa ako.

Nhanho 4: YeGeneric / Kwete-Zita IP Kamera (ONVIF / RTSP), Vhara Indaneti Yavo (WAN) Svika Zvakakwana

Kana ukashandisa yemuno RTSP / ONVIF makamera ane Home Assistant, Frigate, Scrypted, Blue Iris, kana Synology Surveillance Station, makamera iwayo **haadi kuwana internet zvachose **: - Murouter yako Firewall / Parental Controls / MAC Sefa peji, ipa kamera kero yeDHCP IP yakamira uye tarisa "Vimba Internet Access (WAN Block)" yekero yeMAC yekamera iyoyo. Iyo kamera inogona kuramba ichiyerera yakakwira-tsanangudzo vhidhiyo munharaunda yako kune yako hub pamusoro penetiweki yako yemuno, nepo zvichiva zana muzana mumuviri zvisingagoneke kuti chero munhu ari kunze kwemba yako asvike kamera kana kuti kamera ifonere kumba kune mhiri kwemakungwa P2P maseva.


Chikamu chechishanu: Kuomeswa Kwekuvanzika Kwemuviri kuNurseries neMabhedha

Hapana software firewall yakavimbika sefizikisi yemuviri. Shandisa iyi mitemo mina kune chero kamera mukati memba:

  • ** Usambofa wakaisa kamera yeWi-Fi yakabatana negore mukati meimba yekurara yevakuru kana yekugezera, uye nongedzera vana vanochengeta vana CHETE pamubhedha**: Rongedza kireshi chekutarisa pasi pasi saka mukati memubhedha chete uri mufuremu - kwete tafura inochinja, chigaro chevakoti, kana gonhi rekurara.
  • Chinja kune isiri-Wi-Fi Yakavharwa-Loop DECT 6.0 kana Digital FHSS Mucheche Monitor yeNursery: Akazvitsaurira emuno-redhiyo vhidhiyo monitors (senge Infant Optics DXR-8 Pro, Eufy SpaceView local mode, VTech non-Wi-Fi, kana Babysense) ine **zero Wi-Fi chip, zero Cloud account, uye zero internet yekubatanidza **. Nekuti iwo haana kubatana nerouter yako kana internet, hapana hacker mune rimwe guta kana nyika anogona kumboita credential-zvinhu kana kubira.
  • Shandisa Physical Lens Cap kana Smart Plug Power Schedule pane Indoor Living-Kamera: Batanidza indoor pet kana imba yekutandarira makamera mune yakapusa mechanika timer kana smart plug kubva kune akasiyana mutengesi saka simba rinochekwa nekamera pese paunenge uri kumba, kana tenga makamera ane mechanic hardware shutter inovharira lens mumuviri uye inobvisa maikorofoni wedunhu kana yakavharwa.
  • Siya iyo Kamera Status LED (Blue / Red Recording Light) Inogoneswa: Vazhinji vanorwisa vanobva vangopinda mumasetin'a kamera votendeuka Status LED = OFF saka hauzocherechedze kana vabatana kuti vatarise Live View. Tarisa zvigadziriso zvecamera app yako uye chengetedza chimiro chekurekodha chinoratidza LED yakatendeuka ** ON **, uye vhara maikorofoni pinhole negobvu remagetsi tepi kana usingambo shandisa nzira mbiri.

Nhamba dzenharaunda dzechimbichimbi uye zvirongwa zveagency

Kuwanikwa kusingatenderwe kune kamera yekuchengetedza imba kana cheki checheche imhosva yakakomba yekupinza komputa uye voyeurism mhosva. Mhan'ara ipapo

  • United States: Dial 911 kana uchifungidzira kuti munhu apinda ari pedyo nepamba pako. Isa chirevo ku FBI IC3 (ic3.gov) kusanganisira zviratidziro zvekupinda zvisina mvumo, IP kero, uye nguva (18 U.S.C. § 1030 CFAA uye 18 U.S.C. § 2261A), uye taura kusachengeteka IoT hardware ku FTC (ReportFraud.ftc.gov).
  • Canada: Dial 911, isa chichemo chemapurisa pasi peZvikamu 342.1 ne162 (Voyeurism) zve Criminal Code yeCanada, uye zivisa Canadian Center yeCyber ​​Security (cyber.gc.ca).
  • United Kingdom: Dial 999 (kana 101 yemapurisa asiri-emergency) uye taura kupinda kusina mvumo pasi pe Computer Misuse Act 1990 ku Action Fraud (0300 123 2040 / actionfraud.police.uk).
  • European Union: Dial 112 kumatunhu ese enhengo dzeEU uye isa chichemo chemhosva kumapurisa emunyika cybercrime.
  • Australia neNew Zealand: Dial 000 muAustralia kana 111 muNew Zealand; shuma ku ACSC (cyber.gov.au / 1300 292 371) kana CERT NZ (0800 237 869).
  • India neAsia-Pacific: Dial 112 yemhinduro yechimbichimbi kana 1930 (cybercrime.gov.in) kuzivisa kuwanikwa kusina mvumo kwekamera pasi peZvikamu 66 ne66E zve Information Technology Act, 2000.

Mibvunzo inowanzo bvunzwa

Ndingaziva sei kana munhu akataura nekamera yangu ari munhu asina kurongeka painternet achipikisa mumwe munhu akananga imba yangu?

Tarisa zvinhu zviviri: (1) Wakashandisazve email account yekamera yako nepassword pane mamwe mawebhusaiti pasina kugonesa Two-Factor Authentication (`2FA`)? uye (2) inzwi raiti chii? Muzviitiko zvinopfuura makumi mapfumbamwe kubva muzana apo munhu wausingazivi anopopotera mashoko akashata, achiridza mimhanzi, kana kuti anozviti “Santa Claus” kana kuti hacker Ring, Wyze, kana Nest kamera, iri Opportunistic credential-stuffing attack: otomatiki bots akaedza mamirioni eakaburitswa email / password pairi kubva kune yekare data kutyora (`haveibeenpwned.com`), wakaona kuti password yako yakashanda paRing/Wyze, uye trolls muforum yepamhepo kana Discord server yakabatana nemakamera akawanda asina kujairika panguva imwe chete usingatombozivi kuti unogara muguta ripi kana nyika. Zvakasiyana, kana wanga uchitova nemapassword akasiyana neAuthenticator 2FA akagoneswa - kana izwi raiziva mazita enhengo dzemhuri yako, purogiramu yemunharaunda, kana kuti rakauya kuburikidza nechiitiko chisiri cheWi-Fi. aimbova mudiwa, kana muvakidzani uye zivisa mapurisa enzvimbo nekukasika.

Sei lenzi yekamera yangu yaifamba kana kudzvanya yega husiku - zvinoreva here kuti mubiki arikuona?

Kwete nguva dzose - kune zvikonzero zvitatu zvisingafadzi zvemakanika zvikonzero kamera inodzvanya kana kufamba husiku izvo zvaunofanirwa kutonga mushure mekutarisa matanda ako ekupinda: (1) Infrared (`IR`) Cheka Sefa Kudzvanya: Kana chiedza chemukamuri chikadonha manheru kana mwenje wemotokari uchipfuura, mechanika solenoid mukati mekamera inotsvedza infrared sefa nepakati pelenzi ine inonzwika. "click-click" sound; (2) Otomatiki Firmware Reboot & Calibration: Anenge ese ane mota pan-and-tilt (`PTZ`kamera (`Wyze Cam Pan`, `Eufy Indoor Cam Pan`, `Tapo`, `Reolink`) gadza otomatiki firmware inogadziridza pakati pa2:00 AM na4:00 AM, uye pakudzokorodza, mota dzavo dzenhanho dzinotenderera otomatiki 360 madhigirii kubva kuruboshwe-kurudyi uye kumusoro-kudzika-kudzika kuenzanisa nzvimbo yavo yemba; uye (3) Auto-Motion Tracking: Kana "Motion Tracking" yakagoneswa muapp, sirin fan, chipfuyo, kana guruva mote pamberi peiyo infrared LED inogona kuita kuti lenzi ipinde mukamuri. Tarisa paapp yako Zvishandiso Zvakabvumirwa list uye firmware update timestamp kusimbisa.

Ndinogona kumanikidza mutengesi wangu kamera (Ring, Wyze, Nest, Arlo, Nanit) kundiudza IP address yemunhu apinda muaccount yangu akataura nemwana wangu?

Ehe. Kunyangwe iyo app yekutanga mushandisi interface inongoratidza rudzi rwechishandiso (senge "Chrome paWindows" kana "iPhone") uye inofungidzirwa guta, kuvimbiswa kwemutengesi kumashure uye WebRTC midhiya maseva anonyora izvo chaizvo. kunobva IPv4/IPv6 kero, Mushandisi-Mumiriri tambo, nguva yekutanga/kupera nguva, uye maviri-nzira odhiyo activation chiitiko.. Pakarepo vhura tikiti rekutsigira nemutengesi Chengetedzo / Yakavanzika Team uchivakumbira kuti vadaro chengetedza huchokwadi hwese uye WebRTC sesheni logs yeakaundi yako, uye panguva imwe chete isa chirevo chemapurisa emunharaunda uye GDPR/CCPA Chikumbiro cheKuwana Chinyorwa (`DSAR`) kune account yako yakazara IP nhoroondo.

Mucheche wekutarisa anoti "2.4 GHz FHSS" akachengeteka kubva kune internet hackers?

Hongu, kubva internet hackers: akazvitsaurira 2.4 GHz FHSS (Frequency-Hopping Spread Spectrum) yekutarisa inouya neyayo yemubereki chidzitiro cheruoko uye isina Wi-Fi chip kana smartphone app ine zana muzana inodzivirirwa kune vanoba internet, credential stuffing, uye router kusagadzikana. Nekudaro, zvakachipa kana ekare zvisina kuvharirwa analog/FHSS mamonitor anogona dzimwe nguva kutora kupindira kweredhiyo kupfupi kana kuyambuka-kutaura kubva kune imwe mwana yekutarisa, isina tambo foni, kana amateur radio mukati. 90 kusvika 300 mamita (300 kusvika 1,000 tsoka). Mazuva ano digital DECT 6.0 kana AES-128 encrypted FHSS monitors inodzivirira kungojairira redhiyo snooping.

Kana ndikangoburitsa kamera husiku ndozoibatanidza mangwana ndisina kuchinja password yangu, hacker yadzingwa here?

Kwete. Kusunungura kamera kunongocheka simba apo tambo iri kunze kwemadziro. Iyo millisecond yauno plug kamera kudzoka mukati mangwana usina kudzoreredza zvikamu, kushandura password yako yegore, kugonesa 2FA, kana kudzima router. UPnP, kamera inobatanidza zvakare kune iyo chaiyo cloud account (uko foni yeanorwisa ichiri kupinda uye inogamuchira pakarepo chiziviso chekuti kamera yako yadzoka online). Usambofa waka plug kamera yakakanganiswa kumashure kusvika wapedza Chikamu 3 uye 4 pamusoro.

Ko kana abusive ex-partner akaisa iyo Ring, Nest, kana Eufy makamera pataigara tese uye iyo "Muridzi / Yekutanga Admin" account iri mune YAVO email kero?

Mu smart-home ecosystems senge Ring, Nest, Arlo,uye Eufy, "Mushandisi Akagovaniswa" haigone kudzima kana kudzinga iyo "Primary Owner" account - uye kunyangwe ukadzvanya bhatani reFikitari Reset paRing kana Arlo kamera, nhamba yechishandiso/MAC kero inoramba yakakiyiwa (cryptographically locked).`Device Theft / Ownership Lock`) kuaccount yeMuridzi yepakutanga kudzamara vabaya "Bvisa Chishandiso" muapp yavo. Kana aimbove mudiwa wake ari iye Muridzi akanyoreswa wemakamera, mabhero epagonhi, kana makiyi akangwara mumba mako, bvisa uye tora pasi kamera yavo nekukurumidza, vatsive nehardware yakanyoreswa chete kune yako nyowani email account, uye shandura yako yeimba Wi-Fi network zita (`SSID`) uye password kuitira kuti midziyo yavo yekare isambokwanisa kubatana zvakare.


Mazano anoenderana


Nzvimbo uye nhungamiro yepamutemo

  • Federal Bureau of Investigation (FBI) (United States): Chiziviso chePublic Service I-123020-PSA & Smart Home IoT Advisories: Kuchengetedza Smart Cameras, Baby Monitors, uye Voice Assistants Against Credential Stuffing uye "Swatting" Hijacks.
  • Cybersecurity uye Infrastructure Security Agency (CISA) & National Security Agency (NSA) (United States): * Cybersecurity Information Sheet: Kuchengetedza Wireless Networks, Disable UPnP, uye Segmenting Home IoT Devices pane Guest VLANs*.
  • Federal Trade Commission (FTC) (United States): Kushandisa IP Camera uye Internet-Yakabatana Vacheche Monitors Zvakachengeteka.
  • National Cyber ​​Security Center (NCSC) (United Kingdom): Smart Devices Mumba: Kumisikidza Makamera, Vacheche Vatariri, uye Vatauri Vakangwara Zvakachengeteka & Kuchengetedzwa Kwechigadzirwa uye Telecommunications Infrastructure (PSTI) Act Guidance.
  • European Union Agency yeCybersecurity (ENISA): * Nhungamiro Yekuchengetedza iyo Internet yezvinhu (IoT) uye Imba Network Segmentation *.