Qof kula hadlaya Kormeeraha Ilmahaaga ama Kamarada Ammaanka ee Smart: Xiritaanka degdega ah iyo Go'doominta Shabakadda¶

Maqalka codka shisheeyaha oo ku hadlaya isha ilmaha Wi-Fi ee ilmahaaga (Nanit, Owlet, Eufy, VTech, Lollipop, Motorola), daawashada gudaha Ring, Wyze, Arlo, Blink, Google Nest, ama TP-Link Tapo kamarad matoorka leh ee digsi-iyo-jaaban muraayada ayaa iskeed ugu wareegaysa qolkaaga jiifka, adigoo arkaya heerka buluuga/casaanka ee kamaradda LED oo iftiimaya 2:00 subaxnimo, ama helitaanka Ecobee / Nest Heerkulbeeg casri ah oo lagu xardhay 32 darajo Celsius (90 darajo Fahrenheit) waa duullaan cabsi leh oo gurigaaga ah. Si kastaba ha ahaatee, ilaa qof aanad garanayni jidh ahaan albaabadaada ka maqan yahay, ** tani had iyo jeer waa xisaab-daruur fog ama marin-u-socod router halkii qof ka istaagi lahaa daaqadaada bannaankeeda**. In ka badan 90 boqolkiiba afduubka kamaradaha codka laba-geesoodka ah waxay ku dhacaan mid ka mid ah laba siyaabood: **(1) Alaabta aqoonsiga oo otomaatig ah *** (halkaas oo dambiilayaasha internetka ay qaataan iimayl hore iyo erayga sirta ah ee aad dib u isticmaashay goobta tafaariiqda ee la jebiyey oo ku quudi bot ka soo galaya kaaga. Ring, Wyze, Nest, ama ilmaha isha ku haya app Cloud oo kumanaan kiiloomitir u jira), ama (2) Soo gudbinta tooska ah ee IP / UPnP Maxalliga ah (halkaas oo kaamirada IP-ga guud ee aan la daboolin ama duubitaan fiidiyoow shabakadeed NVR loo isticmaalo UPnP in la furo dekedda 554 RTSP, 80, ama 8000 si toos ah u gal internet-ka dadweynaha waxaana lagu tilmaamay Shodan.io mashiinka raadinta). Si aad u adkaato router guriga ballaaran, sidoo kale la tasho hubinta router guriga iyo aaladaha IoT; Haddii aad ka shakisan tahay lammaane hore ama xadgudub guri inuu koontaroolayo qufulka gurigaaga oo dhan iyo nalalkaaga, eeg guriga smart jabsiga, afduubka kamarada, iyo stalkerware; ama haddii qalabkaaga kaydinta NAS lagu garaacay kamaradahaaga, hubi guriga ama xafiiska yar ee NAS iyo UPnP la xiray. Haddii aad maqashid raad-raacyo jireed, aad aragto qof gurigaaga jooga, ama aad uga baqayso badbaadada jireed ee qoyskaaga, wac nambarka degdega ah ee degaankaaga (911 Maraykanka iyo Kanada, 112 guud ahaan Midowga Yurub, 999 gudaha Boqortooyada Ingiriiska) isla markaaba ama kala tasho hagahayaga caalamiga ah ee nambarada degdega ah.

Hadda samee tan¶

1. **Jidh ahaan ka soo saar xadhigga korantada dhabarka isha ilmaha ama kamarada gudaha (oo ka soo saar batari kasta oo kayd ah) 5 ilbiriqsi gudahood ***:
2. **ha lumin wakhtiga furitaanka taleefoonka abka si uu kamarada "Dem" ugu damiyo software-ka weerarka maamula koontada daruurta waxa uu dib ugu rogi karaa software "Mode Privacy" 1 ilbiriqsi gudaheed, iyo qaar ka mid ah kamaradaha la dhibay waxay sii wadaan baahinta codka xitaa marka appku muujiyo quudinta fiidiyowga la hakiyay. Ka soo saar xadhigga gidaarka ama xadhigga korantada ee USB-C isla markaaba kamarada.
3. Fiiri kamarad kasta oo gudaha ah oo Wi-Fi ah oo ku taal qolalkaaga jiifka, xanaanada, iyo meelaha aad deggan tahay oo sidoo kale ka saar. (Ka tag kaamirooyinka gambaleelka bannaanka ee ku xiran kaliya ka dib markaad hubiso in qof jir ahaan gurigaaga ka baxsan yahay.)
4. ** Haku dhufan qalabka "Dib u-dejinta Warshadda" badhanka pinhole ee kamaradda ama dib ha u kicin routerkaaga Wi-Fi ***:
5. Riixista Dib u dajinta Warshada ee kamarada ama ka saarida gurigaaga Wi-Fi router ** waxay tirtirtaa kaydadka RAM ee kacsan (DHCP leases, UPnP port mappings, NAT connection tables, iyo dhacdooyinkii daruuriga ahaa ee dhawaa)** oo muujinaya ciwaanka IP-ga ee weerarka, shaambada wakhtiga soo galitaanka, iyo haddii weerarku ka soo galay akoonkaaga daruurta ama shabakadda Wi-Fi ee deegaankaaga.
6. ** Fur kamaradaada abka moobilka (Ring, Wyze, Nanit, Eufy, Arlo, Nest / Google Home) oo qaado shaashadaha "Aaladaha La Oggol yahay / La Soo Galiyey" iyo "Isticmalayaasha La Wadaago" KA HOR inta aanad burinin ***:
7. Hoos ka eeg Account Settings -> Authorized Client Devices / Login Activity / Shared Users. Sawir sawir nooc kasta oo qalab ah (iPhone 15, Web Browser - Chrome on Windows, Android Emulator), goobta, iyo shaambada wakhtiga warbixintaada booliiska.
8. Isla markiiba taabo Ka saar/ka bax dhammaan Aaladaha, ka saar wixii aan la garanayn ** Isticmaalayaasha Martida la wadaaga ee**, u beddel eraygaaga sirta ah ee 16+ xaraf cusub, oo shid ** Xaqiijinta Laba-Armood (Laba-Factor)2FA) adigoo isticmaalaya App-ka Xaqiijiye (waligaa SMS ama iimayl ha siinin haddii app la taageero)**.
9. ** Hubi haddii kormeeraha dhallaankaaga uu dhab ahaantii yahay kormeeraha raadiyaha aan Wi-Fi ahayn (FHSS 2.4 GHz ama DECT 900 MHz) vs. Wi-Fi Cloud Monitor ***:
10. ** Kala soocida badbaadada jireed ee muhiimka ah : Haddii kormeeraha ilmahaagu aanu lahayn ** Wi-Fi iyo app casriga ah (kaliya shaashad waalid oo gacanta lagu hayo iyo unug kamarad isticmaalaya 2.4 GHz FHSS ama raadiyaha analooga ah), ** laguma jabsan karo intarneedka. Codka ka imanaya kormeeraha raadiyaha aan Wi-Fi ahayn wuxuu ka imanayaa gudaha 90 ilaa 300 mitir (300 ilaa 1,000 cagood) ee gurigaaga - ama ha ahaato hadal-tallaabo shil ah oo ka imanaya kormeeraha ilmaha ee deriska/walkie-talkie ee isla kanaalka soo noqnoqda, ama qof bannaanka dhigay oo wata gudbiye raadiyaha. Haddii codku si toos ah ula hadlay ilmahaaga qalabka aan Wi-Fi ahayn ee raadiyaha, ** albaabbadaada xidh oo wac booliiska degdega ah (911 / 999 / 112) isla markiiba*.
11. ** Gal gurigaaga Wi-Fi Router (192.168.1.1 ama 192.168.0.1) oo dami UPnP (Universal Plug and Play) oo tirtir wixii aan la garanayn Port Forwarding xeerarka ***:
12. Kaamirooyinka P2P ee jaban ama summada cad (VStarcam, Foscam, Tenvis, Hikvision, Dahua, CamHi) isticmaal UPnP in si aamusnaan ah loo feero dekedaha furan (554, 80, 8000, 37777) on your firewall si qof kasta u shido Shodan.io wuxuu arki karaa oo ku hadli karaa kamarada adoon xitaa u baahnayn eraygaaga Wi-Fi.
13. ** Ka dhaqaaji dhammaan kamaradaha, kormeerayaasha dhallaanka, heerkulbeegyada smart, iyo kuwa ku hadla smart Wi-Fi gurigaaga aasaasiga ah una gal meel go'doonsan Guest Wi-Fi Network (ama go'an IoT VLAN leh Client Isolation awooday)**:
14. Xataa haddii furka smart, vacuum-ka robot-ka, ama kormeeraha dhallaanka ay mustaqbalka la kulmaan nuglaanshaha daruuraha, ka go'doominta Wi-Fi-ga martida ee VLAN waxay ka hortagtaa aaladda la dhibay inay iskaan ama weerarto laptop-yada shaqada, taleefannada, ama guriga NAS drive.

Geedka go'aanka: jawaab degdeg ah marka qof qalaad ahi ka dhex hadlo ama dhaqaajiyo kamarada guriga¶

Raac geedkan go'aanka ah 2da daqiiqo ee ugu horraysa dhacdada si aad u qiimeyso badbaadada jireed, u ilaaliso caddaynta, oo aad u xidho qofka soo galay:

flowchart TD
    Start["Codka Shisheeyaha Iyada oo la Maqlayo Kormeeraha Ilmaha / Kaamirada Wacan, ama Muraayada kamarada Keligeed"] --> UnplugNow["TALLAABADA 1 (0 ilaa 5 ilbiriqsi): Jir ahaan ka saar Xadhkaha Korontada (oo ka saar baytariyada) Isla markaaba kamarada"]

    UnplugNow --> MonitorType{"Kormeerahani ma ku xidhaa Wi-Fi / Smartphone App, Mise Waa Kormeere Raadiye Maxali ah oo Go'an (Wi-Fi ma jiro)?"}

    MonitorType -->|"Ma jiro Wi-Fi / Ma jiro App (Go'ay 2.4 GHz FHSS ama Shaashada Waalidka Analog)"| RadioAlert["OGEYSIINTA U DHAWAANSHAHA: Ishaalku wuxuu ka soo bilowday 90 ilaa 300 Mitir gudahood (300 ilaa 1,000 cagood) gurigaaga"]
    RadioAlert --> TalkDirect{"Codku si toos ah ma ula hadlay qolkaaga/ilmahaaga, mise u ekaa Jaarka Random/CB Cross-Talk?"}
    TalkDirect -->|"Si toos ah u hadlay / xaasidnimo"| CallPoliceNow["Quful albaabbada iyo daaqadaha isla markiiba oo wac 911/999/112 si aad u hubiso roondada Booliiska ee dibadda"]
    TalkDirect -->|"Deris Kooban / Walkie-Talkie Cross-Talk"| RePairChannel["Isku-xidho Cutubka Waalidka & Kamarada si aad u rogto FHSS Abuurka Hopping ama U beddelo DECT 6.0 Kormeeraha Qarsoon"]

    MonitorType -->|"Wi-Fi / Cloud App Kamara (Ring, Wyze, Nanit, Eufy, Nest, Arlo, RTSP Guud)"| CloudVsLocal{"Sidee buu ninkii soo galay kamarada ku gaadhay?"}

    CloudVsLocal -->|"Vector A: Alaabta Aqoonsiga Koontada Cloud (90% ee Ring / Wyze / Nest / Nanit Kiisaska)"| CloudLockdown["1. Shaashadda Aaladaha Idman & Taariikhda Dhacdada ee App-ka -> 2. Ka noqo dhammaan fadhiyada -> 3. Dib u deji erayga sirta ah + karti xaqiijiyaha 2FA"]

    CloudVsLocal -->|"Vector B: UPnP / Port Forward / Shodan Direct IP Stream (Generic ONVIF / RTSP / Foscam / Hikvision)"| RouterLockdown["1. Screenshot Router UPnP & Jadwalka Hore ee Dekadda -> 2. Dami UPnP & Tirtir Hormarka Dekadda ->"]

    CloudVsLocal -->|"Vector C: Lammaanihii hore / Marti-guri hore / Akoonka Guriga ee La Wadaago"| SharedLockdown["1. Hantidhawrka 'Isticmalayaasha la wadaago / Xubnaha Qoyska' ee App-ka -> 2. Beddel Wi-Fi SSID & WPA2/WPA3 Password ->"]

    CloudLockdown --> VLANIsolate["Tallaabada u dambaysa: Abuur Martida Go'doonsan/IoT Wi-Fi Network"]
    RouterLockdown --> VLANIsolate
    SharedLockdown --> VLANIsolate

Wajiga 1: Ogaanshaha sida uu weeraryahanku u galay kamaradaada ama heerkulbeeggaaga¶

Kahor intaadan warshad dib u dejin wax, go'aami midkee ** afar dariiqo galitaanka** weeraryahanku isticmaalay. Tani waxay kuu sheegaysaa in qofka wax weeraray uu helay hal app kamarad daruur ah ama in dhammaan shabakada Wi-Fi ee gurigaaga la jabiyay.

Wajiga 2: Ilaalinta Caddaynta ka hor inta aanad dib u dajin (Daqiiqadaha 2 ilaa 15)¶

Haddii qof qalaad uu la hadlo ilmahaaga, xumeeyo qoyskaaga, ama uu basaaso qolka jiifka, falkaasi waa fal dambiyeed culus oo kombuyuutar ah iyo dembi dabagal ah. ** Sug 10 daqiiqo si aad u qabsato afartan cadeymo ee dhijitaalka ah ka hor inta aanad tirtirin ama tirtirin akoonnada**, sababtoo ah mar alla markii aad ka tirtirto aalad abkaaga daruurta, adeegayaasha daruuraha iibiyaha ayaa inta badan nadiifiya diiwaannada dhacdada iyo muuqaallada fiidiyoowga ah isla markaaba:

1. ** Ka soo dejiso Fiidiyowga/Clip-ka Maqalka ee Jadwalka Daruuraha ee Kamarada isla markaaba**:
2. Inta badan kamaradaha dhaqdhaqaaqa dhaqdhaqaaqa iyo kuwa duubista joogtada ah (Ring, Nest Aware, Wyze Cam Plus, Nanit, Arlo, Eufy) duubi wax soo saarka af-hayeenka u gaarka ah iyo falcelinta qolka marka la hadlayo laba dhinac (Live View) waa la hawlgeliyay.
3. Ku fur wakhtiga taariikhda dhacdada ee abka daqiiqada saxda ah ee aad maqashay codka, ** soo dejiso .mp4 Ku dheji duubista kamarada maxaliga ah ee taleefankaaga ***, iyo sidoo kale shaashad ku duub jadwalka dhacdada oo muujinaysa wakhtiga saxda ahHH:MM:SS oo leh aagga waqtiga).
4. ** Sawirka App-ka kamarada "Aaladaha La Ogolaaday" iyo Liiska "Isticmalayaasha La Wadaago" ***:
5. ** Garaacdo**: Menu (≡) -> Control Center -> Authorized Client Devices IYO Shared Users.
6. ** gudaha Wyze ***: Account -> Security -> Manage Devices / Two-Factor Authentication IYO Account -> Sharing.
7. ** Gudaha Google Nest / Guriga Google*: Booqo myaccount.google.com/device-activity oo furan Google Home -> Settings -> Household.
8. ** gudaha Arlo ***: Settings -> Profile -> Login Settings -> Trusted Devices IYO Settings -> Grant Access.
9. ** Keydso routerkaaga guriga System Log, DHCP Client Tableiyo UPnP Table**:
10. Gal interneedka mareegta routerkaaga (http://192.168.1.1, http://192.168.0.1, ama http://10.0.0.1).
11. Aad Administration / System Log -> dhagsii ** Kaydi / Dhoofinta Log *** (faylkan qoraalka ahi waxa uu diiwaangeliyaa xidhiidhada WAN ee soo galaya, codsiyada khariidaynta dekeda UPnP, iyo dhacdooyinka xaqiijinta Wi-Fi MAC ee maxalliga ah).
12. Ka qaad shaashadda DHCP Leases / Attached Devices liiska (gaar ahaan tilmaamaya cinwaanka IP-ga iyo MAC-ga maxalliga ah ee kormeeraha/kameeraha) iyo UPnP / Port Forwarding bogga.
13. ** Ilaali Nambarka Taxanaha ah ee Kamarada Jirka, Cinwaanka MAC, iyo Kaarka MicroSD*:
14. Haddii kamaradu ay leedahay dhinaca ama hoose ee ** booska kaarka MicroSD** (Wyze, Eufy, Tapo, Reolink, Foscam), ** Kaarka MicroSD dibadda u soo saar inta kamaradu furan tahay ** oo silig-blocker-ka-hortagga ama ku koobbi waxa ku jira kumbuyuutar nadiif ah - kamarado badan ayaa wax ku qora gudaha .mp4 qaybaha iyo deegaanka syslog.txt ogaanshaha si toos ah u fayl gareeya kaarka SD xitaa haddii weeraryahanku tirtiro clip-ka daruurta.

Wajiga 3: Ka Saaridda Weeraryahanka Koontadaada Daruuraha (Tallaabooyinka Summadda leh)¶

Markaad kaydiso sawirada qalabka aan la ogalayn, ku samee dil kalfadhi dhamaystiran kamaradaada, afhayeenka smart, iyo aaladaha heerkulbeegga:

1. Amazon Ring, Blinkiyo Echo / Alexa (Laba Jid "Ku Soo Gelida" Afduubyada)¶

• ** Kujira App-ka Ring ***:
• Furan Menu (≡) -> Control Center -> Authorized Client Devices -> taabo "Ka saar Dhamaan Aaladaha".
• Taabo Control Center -> Shared Users -> ka saar isticmaale kasta oo aadan aqoonsan
• Taabo Control Center -> Account Verification -> ka beddel Xaqiijinta Laba-Arimo ee ** Text** una beddel ** App-ka Xaqiijiye**. 4.Taabo Control Center -> Amazon Account Linking oo hubi haddii akoon Amazon aan la aqoon uu ku xidhan yahay.
• ** Gudaha App-ka Amazon Alexa (muhiim u ah haddii codku ku yimaado Echo Dot / Echo Show)**:
• Qaar badan oo "ku-hadla codka caqli-gal ah" ayaa u dhaca sababtoo ah xubin qoyska ka mid ah, lammaane hore, ama weeraryahan ayaa karti u yeeshay ** Alexa "Drop In" *** (taas oo u beddeleysa Echo ku hadliye dhex-dhexaad laba-gees ah oo degdeg ah iyada oo aan qofna qolka ka jawaabin).
• Fur ** Alexa App -> Aaladaha -> dooro Echo ku hadla -> Settings ( icon gear) -> Isgaarsiinta -> Geli *** -> u deji Off (ama My Household Only).
• Booqo amazon.com -> Account & Lists -> Login & Security -> beddel furahaaga oo tag Manage Your Content and Devices -> Devices in laga saaro diiwaanka Echo, kiniiniga dabka, ama rakibaadda abka Alexa oo aan la garanayn.

2. Google Nest Kamaradaha, Albaabka, Hub Max, iyo Nest Thermostats¶

1. Sababtoo ah Nest waxay isticmaashaa Akoonka Google, kamarada Nest ee la afduubay ama heerkulbeeye macnaheedu waa dhammaan Koontadaada Google waa la jabsaday.
2. Isla markiiba furan myaccount.google.com/device-activity -> Saxiix kombuyuutar kasta, taleefan, ama fadhi kasta oo aan la aqoon.
3. Furan myaccount.google.com/connections (Barnaamijka iyo adeegyada xisbiga saddexaad) -> ka noqo buundada guriga smart-ka ee aan la garanayn ama calaamada OAuth.
4. Fur ** Google Home App -> Dejinta -> Guriga *** -> ka saar qof kasta oo aan mar dambe marin u lahayn gurigaaga, oo hubi Settings -> Works with Google in la gooyo isku-dhafka aan la garanayn.

3. Wyze, Eufy, Arlo, TP-Link Tapoiyo Nanit / Owlet Kormeerayaasha Ilmaha¶

1. Isla markiiba ka beddel furahaaga moobilka lambarka sirta ah.
2. Daar ** Appka XaqiijiyeTOTP) Xaqiijinta Laba-Factor** gudaha Account -> Security.
3. ** Kalfadhi-calaamad muhiim ah oo ku saabsan miisaaniyada apps-ka IoT ***: Qaar ka mid ah kormeerayaasha yaryar ee ilmaha yar iyo kamaradaha IP-ga ee gadaal gadaal ka riixaya ** isla markiiba ma burinayaan durdurrada fiidiyaha ee WebRTC / RTSP ee firfircoon markaad bedesho eraygaaga sirta ah kaligaa.
4. ** Sida xoog loogu dilo qulqulka firfircoon ee kamarad kasta : Ka dib markaad badasho eraygaaga sirta ah oo awood 2FA, ** tirtir/ka saar kamarada akoonkaaga ku jira app-ka, kamarada dib ugu xidh adigoo haysta Badhanka Dib-u-dejinta Warshada 15 ilbiriqsi, oo ka soo xidh xoq. Dib-u-lamaanaynta waxay soo saartaa ** sumad-cusub oo qalab cryptographic ah iyo furaha fadhiga P2P UID*, oo si joogto ah u gooya qulqul kasta oo daahaya.

4. Ecobee, Honeywell Home (Resideo), iyo heerkulbeegyada Smart¶

Haddii heerkulbeegga heerkulku iskii isu beddelo ama uu muujiyo farriimo qariib ah: 1. Marka hore iska hubi in tamarta korantada ay kugu diiwaan gashatay barnaamij toos ah Jawaab-jawaabid/Barnaamij Kaydiye ugu sarreeya (Eco+ on Ecobee ama Seasonal Savings on Nest) - yutiilitida waxay meel fog ka hagaajin karaan heerkulka 2 ilaa 3 darajo Celsius (3 ilaa 5 darajo Fahrenheit) inta lagu jiro meelaha ugu sarreeya ee shabaqyada ilaa naafo mooyaane. 2. Haddii heerkulbeeggu lagu qaboojiyey kulayl/qabow aad u daran (32°C / 90°F ama 10°C / 50°F) ama PIN-ku-xiran ee weeraryahan: si toos ah gidaarka uga soo jiid heerkulbeegga wajiga (kaas oo jaraya 24V) R/C silig koronto oo joojiya foornada/AC isla markiiba), dib u deji eraygaaga sirta ah, ka noqo isku-dhafka API-ga qolo saddexaadHomeKit, SmartThings, IFTTT), oo dhig 4-nambar Galidda PIN-ka Kontaroolka unugga heerkulbeegga ka hor inta aanad dib ugu celin gidaarka.

Wajiga 4: Qufulka Router-kaaga Guriga & Abuuritaanka Martida IoT ee Go'doonsan VLAN¶

Xataa haddii adeegayaasha daruuraha iibiyuhu ay sugan yihiin, kamarad ama kormeeraha dhallaanka oo fadhiya isla guri 192.168.1.x Shabakadda Wi-Fi sida laptop-yadaada gaarka ah iyo taleefannadaadu waa khatar ammaan oo weyn. Raac shantan tilaabo si aad ugu adkeyso shabakadaada guriga 15 daqiiqo gudahood:

Tallaabada 1: Dami UPnP (Universal Plug and Play) Si joogto ah¶

1. Gal bogga maamulka routerkaaga (192.168.1.1 / 192.168.0.1 ama adoo isticmaalaya mesh routerkaaga sida Eero, Google Nest Wifi, TP-Link Deco, Netgear Orbi, UniFi, ASUS).
2. U soco Advanced -> NAT Forwarding / WAN -> UPnP.
3. Bedeli UPnP ku OFF (Naafada) oo guji Codso/Save.
4. Waa maxay sababta ay tani lama huraan u tahay: leh UPnP damsan, ma jiro kamarad qallafsan, TV smart, ama NAS kaxaynta gudaha gurigaaga waligeed looma oggola inuu waydiisto router inuu ka furo deked laga soo galo internetka dadweynaha gadaashiisa dambe.
5. Hubi Port Forwarding / Virtual Servers iyo DMZ: Hubi in miiska gudbinta dekeddu uu gabi ahaanba madhan yahay (haddii aanad maamulin server si ulakac ah oo aad u fahantay) iyo in DMZ waa naafo

Talaabada 2: Hubi cinwaankaaga guud ee IP-ga Shodan.io¶

Ma doonaysaa inaad ku ogaato 10 ilbiriqsi gudahood haddii router gurigaagu uu soo bandhigayay wax kamarad ah, kormeeraha ilmaha, daabacaha, ama dekeda NAS ee interneedka dadweynaha? 1. Booqo whatismyipaddress.com ama ifconfig.me ka soo qaado gurigaaga Wi-Fi si aad u koobiyeeyso ciwaankaaga guud ee IPV4 (tusaale, 203.0.113.45). 2. Aad https://www.shodan.io oo raadi cinwaankaaga IP-ga ee dadweynaha (203.0.113.45). 3. Haddii Shodan dhaho "No information available" / 404, Dab-damiskaaga router-kaaga ayaa si sax ah u xaday dhammaan dekedaha. Haddii Shodan uu liis gareeyo dekedaha furan (80, 443, 554 RTSP, 1935 RTMP, 8000, 8080, 37777), routerkaagu wuxuu si toos ah u kashifay aaladaha intarneedka - disable UPnP, Tirtiridda Hore ee Dekedda, iyo daminta Dami Remote Web Management (WAN Admin* on your router wuxuu xiraa dekadahaas isla markiiba.

Talaabada 3: Dhaqaaq Dhammaan kamaradaha, Kormeerayaasha Ilmaha, iyo Aaladaha Casriga ah meel go'doonsan Guest Wi-Fi (ama IoT VLAN)¶

Uma baahnid firewall shirkad qaali ah si aad u abuurto kala qaybsanaan shabakadeed. 99 boqolkiiba macaamiisha Wi-Fi router-ka iyo nidaamyada meshEero, Netgear, ASUS, TP-Link, ISP gateways) waxay leeyihiin sifada "Guest Wi-Fi Network" ku dhex dhisan oo u shaqeysa sidii VLAN go'doonsan: 1. Dejinta routerkaaga, karti u geli 2.4 GHz Wi-Fi Network Martida (sii magac go'an sida Home_IoT_24 iyo 16 xaraf oo xooggan WPA2/WPA3 erayga sirta ah gabi ahaanba wuu ka duwan yahay eraygaaga Wi-Fi ugu weyn). 2. Hubi sanduuqa calaamadaynta ee summadaysan "U oggolow martida inay is arkaan oo ay galaan shabakadayda maxalliga ah" (Local Network Access / Intranet Access) aan la hubin (Naafo ah) - badiyaa loo yaqaan AP Client Isolation. 3. Warshada-dib u daji kormeeraha dhallaankaaga, kamarado caqli-gal ah, fur-fure, robot vacuum, iyo heerkulbeeg caqli-gal ah, oo ku xidh ** si gaar ah Guest / IoT Wi-Fi shabakada. 4. Ku hay laptop-yadaada gaarka ah, kombuyuutarrada desktop-ka, taleefannada casriga ah, tablet-yada, iyo kaydinta NAS-gaaga ** Shabakadda Wi-Fi-ga ugu weyn**. Hadda, xitaa haddii aaladda IoT ee jaban ay leedahay gadaasha dambe ee eber-maalin-firmware, waxay ku xayiran tahay tunnel-sandeysan oo kaliya oo la hadli kara internetka oo aan waligii arki karin ama weerarin kombuyuutarradaada.

Talaabada 4: Loogu talagalay Kaameradaha IP-ga Guud/Magac la'aanONVIF / RTSPXiro Internetkooda (WAN) Gebi ahaanba gelitaanka¶

Haddii aad isticmaasho degaanka RTSP / ONVIF kamarado leh Home Assistant, Frigate, Scrypted, Blue Iris, ama Synology Surveillance Station, kamaradahaas ** uma baahna marin internet haba yaraatee ***: - Gudaha router kaaga **Firewall / Control Parental / MAC shaandhaynta ***, kamarada u qoondee ciwaanka IP-ga ee DHCP oo taagan oo calaamadee "Block Gelitaanka Internetka (WAN Block)" ciwaanka MAC kamaradaas Kamaradu waxay wali sii dayn kartaa fiidiyoow heersare ah gudaha xarunta gurigaaga shabakada deegaankaaga, halka ay noqonayso boqolkiiba 100 jidh ahaan aan suurtogal ahayn in qof kasta oo ka baxsan gurigaaga uu gaadho kamarada ama kamaradu inay telefoon u dirto guriga si ay u helaan adeegayaasha P2P ee dibada.

Wajiga 5: Adkeynta Qarsoonaanta Jireed ee Xannaanada iyo Qolalka jiifka¶

Ma jiro software firewall ah oo la isku halayn karo sida fiisigiska. Ku dhaqan afartan xeer kamarad kasta oo guriga dhexdiisa ah:

• **Weligaa ha dhigin kamarada Wi-Fi-ga ee daruuraha ku xidhan gudaha qolalka jiifka ama musqusha ee dadka waaweyn, oo farta ku fiiq meelaha lagu xanaaneeyo ilmaha oo keliya dhinaca sariirta ***: Xagasha kormeeraha xannaanada xagga hoose sidaa darteed kaliya gudaha sariirta ayaa ku dhex jira qaabka - waligaa miiska beddelka, kursiga kalkaalinta, ama albaabka qolka jiifka.
• **U beddelo Loop-xidhan oo aan Wi-Fi ahayn DECT 6.0 ama Digital FHSS Kormeerka Ilmaha ee Xannaanada ***: Kormeerayaasha fiidyaha raadiyaha maxalliga ah ee u go'ay (sida Infant Optics DXR-8 Pro, Eufy SpaceView qaabka deegaanka, VTech non-Wi-Fi, ama Babysense) leh ** eber Wi-Fi chip, eber akoon, iyo isku xirka internetka eber ***. Sababtoo ah kuma xidhna routerkaaga ama interneedka, ma jiro wax jabsaday magaalo kale ama wadan kale waligiis ma afduubi karo iyaga.
• Isticmaal Koofida Lens-ka Jirka ama Jadwalka Korontada Fiican ee Qolka-Guriga ee Kamaradaha: Ku xidh xawayaanka guriga dhexdiisa ah ama kamaradaha qolka fadhiga saacada farsamaysan ee fudud ama fur smart ka *iibiyaha ka duwan si ay awooda jidh ahaan u goyso kamarada markasta oo aad guriga joogto,ama iibso kamarado leh qalab xidhidh makaanik oo xidha lenska oo gooya wareegga makarafoonka marka la xidho.
• Ka tag heerka kamarada LED (Blue / Red Recording LightLa dajiyay: Weeraryahanno badan ayaa isla markiiba gala goobaha kamarada oo ay jeedsadaan Status LED = OFF markaa ma ogaan doontid marka ay ku xidhmaan daawashada Live View. Hubi dejinta abka kamaradaada oo haayso tusaha heerka duubista ee LED shid ** SHIR**, oo ku dabool daloolka makarafoonka cajalad koronto oo qaro weyn haddii aadan waligaa isticmaalin maqal laba-gees ah.

Lambarada degdega ah ee gobolka iyo borotokoolka wakaalada¶

Helitaanka aan la oggolayn ee kamaradda amniga guriga ama kormeeraha dhallaanka waa faragelin kombuyuutar oo halis ah iyo dembi safar. Isla markiiba ka warbixi:

• Mareykanka: garaac 911 haddii aad ka shakisan tahay in qof soo galay gurigaaga u dhow. Warbixin ka xariigta FBI IC3 (ic3.gov* oo ay ku jiraan shaashadaha galitaanka aan la fasixin, ciwaanka IP-ga, iyo shaambada wakhtiga18 U.S.C. § 1030 CFAA iyo 18 U.S.C. § 2261A), una soo sheeg qalabka IoT ee aan ammaan ahayn FTC (ReportFraud.ftc.gov).
• Kanada: garaac 911, u gudbi ashtako booliis sida hoos timaada Qaybta 342.1 iyo 162 (Voyeurism) ee Xeerka Dambiyada Kanada, oo ogaysii Xarunta Kanadiyaanka ee Amniga Internetka (Criminal Code)cyber.gc.ca).
• United Kingdom: Dial 999 (ama 101 booliska aan degdega ahayn) oo ka warbixi gelitaanka aan la ogalayn ee hoos timaada Xeerka Si xun u Isticmaalka Kombiyuutarka 1990 ilaa Falka Khiyaanada0300 123 2040 / actionfraud.police.uk).
• Midowga Yurub: garaac 112 dhammaan wadamada xubnaha ka ah EU oo u gudbi dacwo dambiyeed booliiska qaranka dambiyada internetka.
• ** Australia iyo New Zealand : garaac 000 gudaha Australia ama 111 gudaha New Zealand; u sheeg ACSCcyber.gov.au / 1300 292 371 ama ** CERT NZ (0800 237 869).
• **India iyo Asia-Pacific ***: garaac 112 ka jawaabida degdega ah ama 1930 (cybercrime.gov.in) in la soo sheego gelitaanka kamarada aan la ogolayn ee hoos timaada Qaybaha 66 iyo 66E ee Xeerka Tignoolajiyada Macluumaadka, 2000.

Su'aalaha soo noqnoqda¶

Sideen ku ogaan karaa in qofka kaamiradayda ku hadlay uu yahay hacker internet random ah vs. qof si gaar ah u beegsanaya gurigayga?¶

Hubi laba shay: (1) Ma dib u isticmaashay iimaylka iyo erayga sirta ah ee akoonkaaga kamarada ee mareegaha kale adiga oo aan awood u siinin Xaqiijinta Laba-Factor (`2FA`) Iyo (2) muxuu yidhi codku? In ka badan 90 boqolkiiba kiisaska marka qof qalaad uu ku qayliyo hadalo aan wanaagsanayn, muusig ku ciyaaro, ama uu sheegto inuu yahay "Santa Claus" ama hacker-ka iyada oo loo marayo Garaac, Wyze, ama Buul camera, waa a weerar wax ku ool ah oo fursad ahBots otomaatig ah ayaa tijaabiyay malaayiin email/lammaanaha sirta ah ee sirta ah oo laga helay jebinta xogta hore (`haveibeenpwned.com`), waxay ogaatay in eraygaaga sirta ah uu ka shaqeeyay Ring/Wyze, oo uu ku dhex wareegayo gole online ah ama server Discord oo ku xidhan daraasiin kamarado random ah hal mar adiga oo aan xitaa ogayn magaalada ama gobolka aad ku nooshahay lammaanihii hore, ama deriska oo ogaysii booliiska deegaanka isla markaaba.

Waa maxay sababta muraayadda mootka ah ee kamaradayda u dhaqaaqday ama iskeed u riixay habeenkii - taasi mar walba miyay la macno tahay in tuuggu daawanayo?¶

Had iyo jeer ma aha - waxaa jira saddex sababood oo farsamo oo wanaagsan oo kamaradu riixdo ama dhaqaaqdo habeenkii oo ay tahay inaad meesha ka saarto ka dib markaad hubiso logyadaada: (1) Infrared (`IR`) Iska jar gujinta shaandhada: Marka iftiinka qolku hoos u dhaco makhribka ama marka nalka hore ee baabuurku ag marayo, solenoid makaanik ah oo ku dhex jira kamarada ayaa jidh ahaan si toos ah u simbiraya shaandhada infrared ee muraayadda oo leh maqal la maqlo. "guji-clack" dhawaaq; (2) Soo Celinta Firmware-ka Tooska ah & QalabayntaKu dhawaad dhammaan digsiga-iyo-jiidashada baabuurta (`PTZ`) kamarado (`Wyze Cam Pan`, `Eufy Indoor Cam Pan`, `Tapo`, `Reolink`) rakibo cusbooneysiinta firmware-ka tooska ah inta u dhaxaysa 2:00 AM iyo 4:00 AM, iyo marka dib loo bilaabo, matoorada stepper-kooda waxay si toos ah u wareegaan 360 digrii bidix-midig iyo kor-ilaa-hoos si ay u cabbiraan booska gurigooda; iyo (3) Dabagalka Dhaqdhaqaaqa Tooska ah: Haddii "Motion Tracking" lagu daalacdo abka, marawaxada saqafka, xayawaanka rabaayada ah, ama boodhka hore ee LED-ka infrared-ku waxay keeni kartaa in muraayadda uu qolka oo dhan ku dul wareego. Hubi abkaaga Aaladaha Idman liiska iyo firmware update timestamp si loo xaqiijiyo.

Ma ku qasbi karaa kaamerada iibiyaha (Ring, Wyze, Nest, Arlo, Nanit) inaad ii sheegto ciwaanka IP-ga ee qofka akoonkayga soo galay oo la hadlay ilmahayga?¶

Haa Xataa haddii is dhexgalka aasaasiga ah ee abka appku muujiyo nooca aaladda (sida "Chrome on Windows" ama "iPhone") iyo magaalada qiyaas ahaan, xaqiijinta dhabarka iibiyaha iyo adeegayaasha warbaahinta WebRTC isha IPv4/IPv6 ciwaanka, Xadhiga Wakiilka Isticmaalaha, Kalfadhiga bilawga/dhamaadka wakhtiga, iyo dhacdada hawlgelinta maqalka ee laba-geesoodka ah. Isla markiiba u fur tigidh taageero ah oo leh Kooxda Nabadgelyada/Kooxda Qarsoodiga ah ee iibiyaha iyaga oo waydiinaya Ilaali dhammaan xaqiijinta iyo diiwaanka fadhiga WebRTC ee akoonkaaga, oo isla mar ahaantaana soo gudbi warbixinta booliiska deegaanka iyo GDPR/CCPA Codsiga Mawduuca Galitaanka`DSAR`) ee koontadaada galitaanka buuxda ee taariikhda IP.

Kormeeraha dhallaanka ee sheegaya "2.4 GHz FHSS" ka badbaado ma yahay tuugada internetka?¶

Haa, ka internetka hackers: heegan 2.4 GHz FHSS (Frequency-Hopping Spread Spectrum) kormeeraha la socda shaashadiisa gacanta ee waalidka oo aan lahayn Wi-Fi chip-ka ama app-ka casriga ah ayaa boqolkiiba 100 ka difaacaya jabsiga internet-ka, walxaha aqoonsiga, iyo dayacanka router. Si kastaba ha ahaatee, kormeerayaasha analoogga/FHSS ee jaban ama ka weyn ayaa mararka qaarkood ka soo qaadan kara faragelin kooban oo raadiyaha ama hadal-ku-gudbin ah kormeeraha ilmaha kale, teleefan aan xadhig lahayn, ama raadiyaha hiwaayadda ah ee gudaha ku jira. 90 ilaa 300 mitir (300 ilaa 1,000 cagood). Casrigan dhijitaalka ah DECT 6.0 ama AES-128 sir FHSS kormeerayaasha ayaa ka hortagaya suuxinta raadiyaha caadiga ah.

Haddii aan kaamirada ka bixiyo habeen gudihii oo aan dib u xidho berrito aniga oo aan beddelin eraygaaga sirta ah, ma jabsigu waa la furay?¶

Maya Kaamirada oo la dajiyo ayaa kaliya jaraysa koronta inta uu xariggu ka maqan yahay darbiga. millise- ilbiriqsi ee aad kamarada ku soo celiso berri adoon burinin fadhiyada, bedeshay eraygaaga sirta ah, awood 2FA, ama joojin router UPnP, kamaradu waxay dib ugu xidhaysaa akoonkii daruuriga ahaa ee saxda ahaa (halkaas oo taleefoonka qofka wax weeraray uu wali ku jiro oo uu helo ogeysiis degdeg ah oo ah in kamaradaadu ay dib ugu soo laabatay khadka). Waligaa kamarada dhibban haku soo celin ilaa aad ka dhamaystirto Wajiyada 3 iyo 4 ee sare.

Ka warran haddii lammaanihii hore ee xadgudubka geystay uu rakibo Ring, Nest, ama Eufy kamaradaha markii aan wada noolaanay iyo "Owner / Primary Admin" akoonku wuxuu ku yaalaa ciwaankooda iimaylka?¶

Nidaamyada deegaanka smart-guriga sida Garaac, Buul, Arloiyo Eufy, "Isticmaal la wadaago" ma tirtiri karo ama ma saari karo akoontiga "Milkiilaha Koowaad" - iyo xitaa haddii aad riixdo badhanka Dib-u-dejinta Warshada ee giraanta ama kamarada Arlo, lambarka taxan ee aaladda/Cinwaanka MAC wuxuu ahaanayaa mid si qarsoodi ah u xiran`Device Theft / Ownership Lock`) xisaabta asalka ah ee Mulkiilaha ilaa ay taabtaan "Ka saar Aaladda" abka kooda. Haddii lamaanahaaga hore ee xad-gudbigu yahay mulkiilaha kamaradaha, gambaleelka albaabada, ama qufullada smart ee gurigaaga, fur oo si toos ah u deji kamaradahooda isla markaaba, ku beddel qalabkaaga gaarka ah ee ka diiwaan gashan e-mailkaaga cusub, oo beddel magaca shabakadda Wi-Fi ee gurigaaga (`SSID`) iyo erayga sirta ah si aaladoodii hore aysan waligood dib isugu xirin.

Tilmaamaha la xidhiidha¶

• Hoyga smart jabsiga, afduubka kamarada, iyo stalkerware
• Sugidda jiheeyayaasha guriga iyo aaladaha IoT
• Buuxinta aqoonsiga weerarka bot otomaatiga ah ee mayl daacadnimada, kaararka hadiyadda, iyo xisaabaadka
• Guriga ama xafiiska yar ee NAS (QNAP/Synology) la jabiyay iyo UPnP deminta gudbinta
• Afduubka DNS, ISP router WAN dib-u-habaynta, iyo xadhkaha goosashada
• Nambarada degdega ah wadan ahaan

Ilaha iyo hanuuninta rasmiga ah¶

• Xafiiska Baarista FederaalkaFBI) (Mareykanka): Ogaysiinta Adeegga Dadweynaha I-123020-PSA & Taloyinka IoT ee Smart Home: Hubinta kamaradaha casriga ah, Kormeerayaasha Ilmaha, iyo Caawinta Codka ee Ka Hortagga Walxaha Aqoonsiga iyo Afduubyada "Swatting".
• Nabadgelyada internetka iyo Hay'adda Ammaanka KaabayaashaCISA) & Hay'adda Nabadsugidda Qaranka (NSA) (Mareykanka): * Xaashida macluumaadka amniga internetka: Xaqiijinta Shabakadaha Wireless-ka, Deminta UPnP, iyo Kala-qaybinta Guriga IoT Qalabka VLAN-yada martida*.
• Guddiga Ganacsiga ee FederaalkaFTC) (Mareykanka): Isticmaalka kamaradaha IP-ga iyo Kormeerayaasha Ilmaha ee Internet-ku-xiran.
• Xarunta Amniga Internetka ee QarankaNCSC) (Boqortooyada Ingiriiska): Aaladaha casriga ah ee Guriga ku jira: Dejinta kamaradaha, Kormeerayaasha Ilmaha, iyo Ku Hadlada Wacan ee si sugan & Badbaadada Alaabta iyo Kaabayaasha Isgaadhsiinta (PSTI) Tusmada.
• Hay'adda Midowga Yurub ee amniga internetkaENISA): * Tilmaamaha Sugidda Internetka Waxyaabaha (IoT) iyo Qaybinta Shabakadda Guriga*.