Ho na le Motho ea Buang ka Monitor oa Ngoana oa Hao kapa Smart Security Camera: Ho Koala Hang-hang le ho Ikhetholla Marang-rang¶

Ho utloa lentsoe la motho eo u sa mo tsebeng le bua ka sebonela-hōle sa ngoana sa Wi-Fi (Nanit, Owlet, Eufy, VTech, Lollipop, Motorola), ho shebella ka tlung Ring, Wyze, Arlo, Blink, Google Nest, kapa TP-Link Tapo lense ea khamera e tsamaeang ka koloi e pota-pota ka kamoreng ea hau ka boeona, e bona boemo ba khamera bo boputsoa / bo bofubelu ba LED bo bonesa ka 2:00 AM, kapa ho fumana sebaka sa hau. Ecobee / Nest Thermostat e bohlale e theohetseng ho likhato tse 32 tsa Celsius (90 degrees Fahrenheit) ke tlhaselo e tšosang ea lehae la hau. Leha ho le joalo, ntle le haeba motho eo u sa mo tsebeng a le ka ntle ho menyako ea hau, ena e batla e le sebaka se hole sa cloud-account kapa router port-forwarding intrusion ho fapana le motho ea emeng ka ntle ho fensetere ea hau. Ho feta liperesente tse 90 tsa bosholu ba lik'hamera tsa lentsoe tse peli li etsahala ka e 'ngoe ea litsela tse peli: (1) Automated Credential Stuffing (moo linokoane li nkang lengolo-tsoibila la khale le phasewete tseo u li sebelisitseng hape sebakeng sa marang-rang se senyehileng ebe li li kenya bot e kenang ho hau. Ring, Wyze, Nest, kapa app monitor cloud cloud ho tloha lik'hilomithara tse likete), kapa (2) Direct Local IP / UPnP Port Forwarding Exposure (moo kh'amera ea IP e sa ngolisoang kapa sehatisi sa video sa marang-rang NVR sebedisoa UPnP ho bula boemakepe 554 RTSP, 80, kapa 8000 ka kotloloho marang-rang a sechaba mme e ne e ngolisitsoe ke ba Shodan.io enjene ea ho batla). Bakeng sa ho thatafatsa router ea lapeng ka bophara, hape buisana ho boloka li-routers tsa lapeng le lisebelisoa tsa IoT; haeba u belaela hore molekane oa pele kapa mohlekefetsi oa lapeng o laola liloko le mabone a ntlo ea hau kaofela, bona smart home hack, ho koetela khamera, le stalkerware; kapa haeba sesebelisoa sa hau sa polokelo sa NAS se ile sa otloa haufi le lik'hamera tsa hau, hlahloba ntlo e senyehileng kapa ofisi e nyane ea NAS le UPnP shutoff. Haeba u utloa mehato ea 'mele, u bona motho setšeng sa hau, kapa u tšaba polokeho ea hang-hang ea lelapa la hau, letsetsa nomoro ea hau ea tšohanyetso ea lehae (911 United States le Canada, 112 ho pholletsa le European Union, 999 United Kingdom) hang-hang kapa sheba bukana ea rona ea lefats'e ea dinomoro tsa tshohanyetso.

Etsa sena hona joale¶

1. Hopola thapo ea motlakase ka morao ho sebui sa ngoana kapa kh'amera e ka tlung ('me u ntše betri efe kapa efe e ka hare ea bekapo) nakong ea metsotsoana e 5:
2. U se ke ua senya nako ho bula sesebelisoa sa mohala ho tima khamera ho "Tima" ho software - mohlaseli ea nang le taolo ea ak'haonte ea leru a ka khutlisetsa software ea "Privacy Mode" ka motsotsoana o le mong, 'me lik'hamera tse ling tse senyehileng li tsoela pele ho phallela molumo le ha sesebelisoa se bonts'a hore fepa ea video e emisitsoe. Hula polaka ea lebota kapa thapo ea motlakase ea USB-C ka ntle ho khamera hang-hang.
3. Lekola kh'amera e 'ngoe le e 'ngoe ea ka tlung ea Wi-Fi ka likamoreng tsa hau tsa ho robala, kerecheng le libakeng tsa bolulo 'me le tsona u li lokolle. (Tloha ka ntle tseleng e kenang ka koloing/lik'hamera tsa tšepe tse monyako li hoketsoe feela ka mor'a hore u hlahlobe hore na ho na le motho ea ka ntle ho ntlo ea hau.)
4. ** SE KE UA otla konopo ea pinhole ea "Factory Reset" ea kh'amera kapa qala router ea hau ea Wi-Fi hape**:
5. Ho tobetsa Factory Reset ho kh'amera kapa ho notlolla router ea lapeng ea Wi-Fi e hlakola lintlha tse sa tsitsang tsa RAM (DHCP leases, UPnP port mappings, NAT connection tables, le likarolo tsa morao-rao tsa liketsahalo tsa cloud) tse bontšang aterese ea IP ea mohlaseli, setempe sa nako sa ho kena, le hore na mohlaseli o kene ka akhaonto ea hau ea leru kapa ka marang-rang a hau a Wi-Fi.
6. **Bula sesebelisoa sa mohala sa khamera ea hau (Ring, Wyze, Nanit, Eufy, Arlo, Nest / Google Home) 'me u nke linepe tsa "Lisebelisoa Tse Lumelletsoeng / Tse Keneng Tse Keneng" le "Basebelisi ba Abelaneng" PELE ho li hlakola **:
7. Sheba ka tlase Account Settings -> Authorized Client Devices / Login Activity / Shared Users. Sheba mofuta o mong le o mong oa sesebelisoa (iPhone 15, Web Browser - Chrome on Windows, Android Emulator), sebaka, le setempe sa nako bakeng sa tlaleho ea sepolesa sa hau.
8. Hang-hang tlanya ** Tlosa / Tsoa ho Lisebelisoa Tsohle **, tlosa leha e le efe e sa tsejoeng ** Basebelisi ba Abelaneng / Baeti **, fetola phasewete ea hau ea akhaonto hore e be password e ncha e ikhethang e nang le litlhaku tse 16+, 'me u bulele Netefatso ea Lintho tse peli (2FA) ka ho sebelisa App Authenticator (le ka mohla u se ke ua SMS kapa lengolo-tsoibila haeba sesebelisoa se tšehetsoa).
9. Sheba hore na sebui sa ngoana oa hau ha e le hantle ke sebui sa seea-le-moea seo e seng sa Wi-Fi (FHSS 2.4 GHz kapa DECT 900 MHz) khahlano le Wi-Fi Cloud Monitor:
10. **Phapang ea bohlokoa ea polokeho ea 'mele : Haeba sebali sa ngoana oa hau se se na Wi-Fi ebile se sena sesebelisoa sa smartphone (sekirini sa motsoali se inehetseng feela le kh'amera e sebelisang 2.4 GHz FHSS kapa seea-le-moea sa analoge), e ke ke ea utsuoa inthaneteng. Lentsoe le tsoang ka har'a mochini oa seea-le-moea oo e seng oa Wi-Fi le tsoa kahare ho 90 ho isa ho 300 metres (300 ho isa ho 1,000 maoto) ho tloha lapeng la hau - e ka ba puisano e sa lebelloang e tsoang ho ngoana oa moahelani oa moahelani/walkie-talkie seteisheneng se le seng, kapa motho e mong ea emeng ka ntle ka mochini o fetisang molaetsa oa seea-le-moea. Haeba lentsoe le ne le bua ka ho toba le ngoana oa hao ka seea-le-moea seo e seng sa Wi-Fi, ** notlela mamati a hao 'me u letsetse mapolesa a tšohanyetso (911 / 999 / 112) hang hang.
11. Kena ho router ea hau ea lapeng ea Wi-Fi (192.168.1.1 kapa 192.168.0.1) ebe o tima UPnP (Universal Plug and Play) ebe o hlakola leha e le efe e sa tsejoeng Port Forwarding melao:
12. Likh'amera tsa P2P tse theko e tlaase kapa tse tšoeu (VStarcam, Foscam, Tenvis, Hikvision, Dahua, CamHi) sebelisa UPnP ho otla likou tse bulehileng ka khutso (554, 80, 8000, 37777) ho firewall ea router ea hau hore mang kapa mang a kene Shodan.io o khona ho sheba le ho bua ka khamera ntle le ho hloka password ea hau ea Wi-Fi.
13. Suthisa lik'hamera tsohle, limonita tsa bana, li-thermostats tse bohlale, le libui tse bohlale ho tsoa ho Wi-Fi ea hau ea lapeng 'me u li behe sebakeng se ka thoko. Guest Wi-Fi Network (kapa e inehetse IoT VLAN ka Client Isolation thusa):
14. Leha plug e bohlale, vacuum ea liroboto, kapa sesebelisoa sa bana se ka ba kotsing ea ho ba kotsing nakong e tlang, ho e arola ho Moeti oa Wi-Fi VLAN ho thibela sesebelisoa se senyehileng ho sekena kapa ho hlasela lilaptop tsa mosebetsi oa hau, mehala, kapa drive ea lapeng ea NAS.

Sefate sa liqeto: karabo ea hang-hang ha motho eo u sa mo tsebeng a bua kapa a tsamaisa khamera ea lapeng¶

Latela sefate sena sa liqeto nakong ea metsotso ea pele ea 2 ea ketsahalo ho lekola polokeho ea 'mele, ho boloka bopaki, le ho notlela motho ea kenang ka ntle:

flowchart TD
    Start["Lentsoe la Stranger le Utloiloe ka Baby Monitor / Smart Camera, kapa Lense ea Khamera e Itsamaisa ka Boyona."] --> UnplugNow["MOHATO 1 (0 ho 5 Metsotsoana): Tlosa Mothapo oa Matla ka 'Meleng ('me U tlose Battery) Ho Tsoa Khamera Hang-hang."]

    UnplugNow --> MonitorType{"Na Monitor ee e hokahana le Wi-Fi / Smartphone App, kapa na ke Sesebelisoa sa Radio sa Lehae se inehetseng (Ha ho Wi-Fi)?"}

    MonitorType -->|"Ha ho Wi-Fi / No App (E Nehetsoeng 2.4 GHz FHSS kapa Sekrine sa Batsoali sa Analog)"| RadioAlert["TLHOKOMELISO EA PROXIMITY: Letšoao le Thehiloe ka har'a Limithara tse 90 ho isa ho tse 300 (Maoto a 300 ho isa ho a 1,000) ea Lehae la Hau."]
    RadioAlert --> TalkDirect{"Na Lentsoe le ne le Bua ka ho Otloloha le Kamore ea Hao/Ngoana, kapa le Utloahala Joalo ka Moahelani ea sa reroang/CB Cross-Talk?"}
    TalkDirect -->|"O buile ka ho Otloloha / Lenyatsi"| CallPoliceNow["Notlela Menyako & Windows Hang-hang 'me U letse 911 / 999 / 112 bakeng sa Tlhahlobo ea Kantle ea Sepolesa."]
    TalkDirect -->|"Moahelani ea Khutšoane / Walkie-Talkie Cross-Talk"| RePairChannel["Kopanya hape Lekala la Batsoali le Khamera ho Potoloha FHSS Hopping Peo kapa Fetolela ho DECT 6.0 Encrypted Monitor"]

    MonitorType -->|"Wi-Fi / Cloud App Khamera (Ring, Wyze, Nanit, Eufy, Nest, Arlo, Generic RTSP)"| CloudVsLocal{"Lesholu le Fihlile K'hamera Joang?"}

    CloudVsLocal -->|"Vector A: Cloud Account Credential Stuffing (90% ea Ring / Wyze / Nest / Nanit Cases)"| CloudLockdown["1. Screenshot Authorized Devices & Event History in App -> 2. Hlakola All Sessions -> 3. Reset Password + Enable Authenticator 2FA"]

    CloudVsLocal -->|"Vector B: UPnP / Port Forward / Shodan Direct IP Stream (Generic ONVIF / RTSP / Foscam / Hikvision)"| RouterLockdown["1. Screenshot Router UPnP & Port Forward Table -> 2. Tlosa UPnP & Hlakola Port Forward -> 3. Thibela Khamera WAN Access ho Firewall"]

    CloudVsLocal -->|"Vector C: Molekane oa Pele / Moeti oa Pele oa Ntlo / Akhaonto e Abelaneng ea Lelapa"| SharedLockdown["1. Hlahloba 'Basebelisi ba Abelanoeng / Litho tsa Malapa' ho App -> 2. Fetola Wi-Fi SSID & WPA2/WPA3 Password -> 3. Hlahisa Femethari bocha 'me u tlama Khamera hape Akhaontong e Ncha."]

    CloudLockdown --> VLANIsolate["Mohato oa ho Qetela: Theha Baeti ba Isolated / IoT Wi-Fi Network (Client Isolation ON) 'me u hokelle hape lisebelisoa tsa bohlokoa tse patiloeng feela."]
    RouterLockdown --> VLANIsolate
    SharedLockdown --> VLANIsolate

Mohato oa 1: Ho tseba hore na mohlaseli o kene joang ka har'a khamera kapa thermostat ea hau¶

Pele o seta eng kapa eng hape fekthering, fumana hore na ho litsela tse 'ne tsa ho kenella ke mohlaseli o sebelisitseng. Sena se u bolella hore na mohlaseli o na le monyetla oa ho sebelisa sesebelisoa se le seng sa khamera ea leru kapa hore na netweke eohle ea lapeng ea Wi-Fi e senyehile.

Mokhahlelo oa 2: Ho Boloka Bopaki Pele U Seta Botjha (Metsotso 2 ho isa ho 15)¶

Haeba motho eo u sa mo tsebeng a ne a bua le ngoana oa hao, a hlekefetsa lelapa la hao, kapa a hloela kamore ea ho robala, ketso eo ke tlōlo ea molao e mpe ea ho kena-kenana le k’homphieutha. **Ema metsotso e 10 ho nka likarolo tsena tse nne tsa bopaki ba dijithale pele u hlakola kapa u hlakola liakhaonto **, hobane hang ha u hlakola sesebelisoa ho app ea hau ea leru, li-server tsa leru tsa morekisi li atisa ho hlakola litlaleho tsa liketsahalo tse amanang le livideo hang-hang:

1. Khoasolla Sekotwana sa Video/Molumo ho Lenane la Nako la Nako la Leru la Khamera hang-hang:
2. Likh'amera tse ngata tse kentsoeng tšebetsong le tse rekotang khafetsa (Ring, Nest Aware, Wyze Cam Plus, Nanit, Arlo, Eufy) rekota tlhahiso ea sebui sa sona le tsela eo kamore e arabelang ka eona ha motho a bua ka litsela tse peli (Live View) e kentswe tshebetsong.
3. Bula kemiso ea nako ea nalane ea ketsahalo ho sesebelisoa bakeng sa motsotso oo u utloileng lentsoe ka oona, ** khoasolla .mp4 sekotwana moqolong oa khamera ea fono ea hau**, hape o rekota kemiso ea nako ea ketsahalo skrineng e bonts'ang setempe sa nako (HH:MM:SS ka sebaka sa nako).
4. Sheba skrineng sa "Lisebelisoa Tse Amohelitsoeng" le "Lisebelisoa Tse Abelanoeng" tsa Khamera:
5. Mohala: Menu (≡) -> Control Center -> Authorized Client Devices LE Shared Users.
6. Ho Wyze: Account -> Security -> Manage Devices / Two-Factor Authentication LE Account -> Sharing.
7. Ho Google Nest / Google Home: Etela myaccount.google.com/device-activity le ho bula Google Home -> Settings -> Household.
8. Ho Arlo: Settings -> Profile -> Login Settings -> Trusted Devices LE Settings -> Grant Access.
9. ** Boloka router ea hau ea Lehae System Log, DHCP Client Table, le UPnP Table**:
10. Kena ho sehokelo sa webo sa router ea hau (http://192.168.1.1, http://192.168.0.1, kapa http://10.0.0.1).
11. Eya ho Administration / System Log -> tobetsa Boloka / Export Log (faele ena ea mongolo e tlaleha likhokahano tse kenang tsa WAN, likopo tsa ho etsa 'mapa oa boema-kepe ba UPnP, le liketsahalo tsa lehae tsa netefatso ea Wi-Fi MAC).
12. Nka setšoantšo sa skrine sa DHCP Leases / Attached Devices lethathamo (haholo-holo ho hlokomeloa aterese ea IP le MAC ea sebaka sa bana / khamera) le UPnP / Port Forwarding leqephe.
13. Boloka Nomoro ea serial ea Khamera, Aterese ea MAC, le karete ea MicroSD:
14. Haeba kh'amera e na le "slot" sa karete ea MicroSD ** lehlakoreng kapa tlase (Wyze, Eufy, Tapo, Reolink, Foscam), **tloha karete ea MicroSD ha khamera e sa koaheloa ** ebe u thellela se thibelang ho ngola kapa u kopitse litaba tsa eona khomphuteng e hloekileng - lik'hamera tse ngata li ngola sebakeng sa heno. .mp4 dikarolo le tsa lehae syslog.txt diagnostics ka ho toba kareteng ea SD le haeba mohlaseli a hlakotse sekotwana sa leru.

Mokhahlelo oa 3: Ho leleka Mohlaseli ho Liak'haonte tsa Hao tsa Cloud (Mehato ea Brand-by-Brand)¶

Ha u se u bolokile linepe tsa lisebelisoa tse sa lumelloeng, etsa polao e felletseng ea kh'amera ea hau, sebui se bohlale le sethala sa thermostat:

1. Amazon Ring, Blink, le Echo / Alexa (Liqhoebeshano tsa "Drop In" tsa litsela tse peli)¶

• Ho Ring App:
• Bula Menu (≡) -> Control Center -> Authorized Client Devices -> tlanya "Tlosa Lisebelisoa Tsohle".
• Tlanya Control Center -> Shared Users -> tlosa mosebelisi ofe kapa ofe eo u sa mo tsebeng.
• Tlanya Control Center -> Account Verification -> fetola netefatso ea lintlha tse peli ho tloha ho Mongolo oa SMS ho ea ho Authenticator App. 4.Tlanya Control Center -> Amazon Account Linking 'me u hlahlobe hore na akhaonto ea Amazon e sa tloaelehang e hokahane.
• Ho Amazon Alexa App (Ho bohlokoa haeba lentsoe le tsoa ho Echo Dot / Echo Show):
• "Ho kenella ka lentsoe la sebui se bohlale" ho etsahala hobane setho sa lelapa, molekane oa mehleng, kapa mohlaseli ba nolofalitse Alexa "Drop In" (e fetolang sebui sa Echo hore e be intercom ea litsela tse peli hang-hang ntle le mang kapa mang ka phapusing ea arabang).
• Bula ** Alexa App -> Lisebelisoa -> khetha sebui sa hau sa Echo -> Litlhophiso (setšoantšo sa gear) -> Lipuisano -> Tlohela ** -> e behe ho Off (kapa My Household Only).
• Etela amazon.com -> Account & Lists -> Login & Security -> fetola phasewete ea hau 'me u ee ho Manage Your Content and Devices -> Devices ho hlakola ngoliso efe kapa efe e sa tsejoeng ea Echo, Letlapa la Fire, kapa ts'ebetso ea Alexa.

2. Google Nest Lik'hamera, litloloko tsa mamati, Hub Max, le Nest Thermostats¶

1. Hobane Nest e sebelisa Google Account ea hau, kh'amera ea Nest e utsoitsoeng kapa thermostat e bolela hore Akhaonto eohle ea hau ea Google e senyehile.
2. Bula hanghang myaccount.google.com/device-activity -> saena k'homphieutha e 'ngoe le e 'ngoe eo u sa e tsebeng, mohala kapa seboka.
3. Bula myaccount.google.com/connections (Lisebelisoa le lits'ebeletso tsa mokha oa boraro) -> hlakola borokho bofe kapa bofe bo sa tsejoeng ba lapeng kapa tokene ea OAuth.
4. Bula Google Home App -> Litlhophiso -> Lapeng -> tlosa motho leha e le ofe ea seng a sa lokela ho kena lapeng la hao, 'me u hlahlobe Settings -> Works with Google ho tlosa likhokahanyo tse sa tsejoeng.

3. Wyze, Eufy, Arlo, TP-Link Tapo, le Nanit / Owlet Bahlahlobi ba Bana¶

1. Fetola phasewete ea akhaonto hang-hang ho sesebelisoa sa hau sa mohala.
2. Numella App ea Authenticator (TOTP) Bopaki ba Lintlha tse peli ho Account -> Security.
3. **Tlhahiso ea bohlokoa ea seshene ho lisebelisoa tsa IoT tsa tekanyetso **: Liipone tse nyane tsa bana le li-backend tsa leru la IP ** se ke oa hlakola hang-hang melatsoana ea video ea WebRTC / RTSP ha u fetola phasewete ea hau u le mong **.
4. ** Mokhoa oa ho qobella ho bolaea molapo o sebetsang ho khamera efe kapa efe ea leru **: Kamora ho fetola phasewete ea hau le ho nolofalletsa 2FA, ** hlakola / tlosa kh'amera ho tsoa akhaonteng ea hau ka har'a sesebelisoa **, kenya kh'amera hape ha u ntse u tšoere konopo ea **Factory Reset bakeng sa metsotsoana e 15 **, 'me u e kopanye ho tloha qalong. Ho kopanya hape ho hlahisa ** tokene e ncha ea "cryptographic" le senotlolo sa nako ea P2P UID **, e khaola ka ho sa feleng molapo o salang.

4. Ecobee, Honeywell Home (Resideo), le Smart Thermostats¶

Haeba mocheso oa thermostat oa hau o ntse o fetoha kapa o hlahisa melaetsa e makatsang: 1. Sheba pele hore na sesebelisoa sa hau sa motlakase se u ngolisitse ho Demand Response / Peak Saver program (Eco+ ka Ecobee kapa Seasonal Savings ho Nest) - lisebelisoa li ka fetola lithempereichara li le hole ka likhato tse 2 ho isa ho tse 3 tsa Celsius (3 ho isa ho 5 degrees Fahrenheit) nakong ea litlhoro tsa grid ntle le haeba li koaletsoe. 2. Haeba thermostat e ne e kaba mocheso o feteletseng / serame (32°C / 90°F kapa 10°C / 50°F) kapa PIN e notletsoe ke mohlaseli: hula sefahleho sa thermostat ka kotloloho leboteng (e fokotsang 24V ea eona R/C terata ea motlakase 'me e emisa sebōpi / AC hang-hang), khutlisetsa phasewete ea hau ea leru, hlakola likhokahano tsa mokha oa boraro oa API (HomeKit, SmartThings, IFTTT), ebe o seta PIN ya dinomoro tse 4 Access Control PIN ho thermostat yuniti pele o e kgutlisetsa leboteng.

Mokhahlelo oa 4: Ho notlela Router ea Hau ea Lehae le ho theha VLAN ea Moeti ea Isolated IoT¶

Leha li-server tsa leru tsa morekisi li bolokehile, kh'amera kapa leihlo la lesea le lutse foleteng e le 'ngoe 192.168.1.x Marang-rang a Wi-Fi joalo ka lilaptop le mehala ea hau ke kotsi e kholo ea ts'ireletso. Latela mehato ena e mehlano ho thatafatsa marang-rang a lapeng ka metsotso e 15:

Mohato oa 1: Tlosa UPnP (Universal Plug and Play) Ka ho sa feleng¶

1. Kena leqepheng la hau la tsamaiso ea router (192.168.1.1 / 192.168.0.1 kapa ka sesebelisoa sa hau sa mesh router joalo ka Eero, Google Nest Wifi, TP-Link Deco, Netgear Orbi, UniFi, ASUS).
2. Tsamaea ho Advanced -> NAT Forwarding / WAN -> UPnP.
3. Fetola **UPnP ho OFF (E holofetse) ** ebe o tobetsa ** Etsa kopo / Boloka **.
4. Hobaneng sena se le bohlokoa: Ka UPnP e koetsoe, ha ho na k'hamera e thata, TV e bohlale, kapa koloi ea NAS ka hare ho ntlo ea hau e lumelloa ho kopa router ho bula boema-kepe bo tsoang marang-rang a sechaba ka morao.
5. Sheba Port Forwarding / Virtual Servers le DMZ: Netefatsa hore tafole ea Phatlalatso ea Boema-kepe ha e na letho ka botlalo (ntle le haeba o sebelisa seva e ikemetseng eo u e utloisisang) le hore DMZ e holofetse.

Mohato oa 2: Sheba Aterese ea hau ea IP ea Sechaba ho Shodan.io¶

Na u batla ho tseba ka metsotsoana e 10 hore na router ea hau ea lapeng e ne e hlahisa kh'amera efe kapa efe, leihlo la bana, mohatisi kapa boema-kepe ba NAS marang-rang a sechaba? 1. Etela whatismyipaddress.com kapa ifconfig.me ho tsoa ho Wi-Fi ea hau ea lapeng ho kopitsa aterese ea hau ea sechaba ea IPv4 (mohlala, 203.0.113.45). 2. Eya ho https://www.shodan.io 'me u batle aterese ea hau ea IP ea sechaba (203.0.113.45). 3. Haeba Shodan a re "No information available" / 404, firewall ea router ea hau e utsoa likou tsohle ka nepo. Haeba Shodan e thathamisa likou tse bulehileng (80, 443, 554 RTSP, 1935 RTMP, 8000, 8080, 37777), router ea hau e ne e hlahisa lisebelisoa ka kotloloho inthaneteng - e tima UPnP, ho phumula Port Forwards, le ho tima ** TIMA Remote Web Management (WAN Admin)** ho router ea hau e koala likou tseo hang-hang.

Mohato oa 3: Tsamaisa Likh'amera Tsohle, Li-Monitor tsa Bana, le Lisebelisoa tsa Smart ho e Isolated Guest Wi-Fi (kapa IoT VLAN)¶

Ha o hloke li-firewall tsa khoebo tse turang ho theha likarolo tsa marang-rang. Diperesente tse 99 tsa dirouters tsa Wi-Fi tsa bareki le mesh system (Eero, Netgear, ASUS, TP-Link, ISP gateways) e na le karolo e hahelletsoeng ka har'a "Guest Wi-Fi Network" e sebetsang joalo ka VLAN e ka thoko: 1. Litlhophisong tsa router ea hau, lumella 2.4 GHz Guest Wi-Fi Network (e fane ka lebitso le ikhethileng joalo ka Home_IoT_24 le matla a litlhaku tse 16 WPA2/WPA3 phasewete e fapaneng ka ho felletseng le password ea hau ea mantlha ea Wi-Fi). 2. Netefatsa hore lebokose le ngotsoeng "Lumella baeti ho bonana le ho kena marang-rang a heso" (Local Network Access / Intranet Access) HA E HLAHLWE (E holofetse) - hangata e bitsoa AP Client Isolation. 3. Hlophisa lesea la hao ka fektheri, lik'hamera tse bohlale, li-plug tse bohlale, vacuum ea liroboto, le thermostat e bohlale, 'me u li hokele ka ho khetheha Guest / IoT Wi-Fi marangrang. 4. Boloka lilaptop tsa hau, li-PC tsa desktop, li-smartphones, matlapa le polokelo ea NAS ho Main Wi-Fi Network ea hau. Hona joale, le haeba sesebelisoa sa IoT se theko e tlaase se na le "zero-day firmware backdoor", se qabeletsoe ka har'a kotopo e nang le sandbox e ka buang le marang-rang feela 'me e ke ke ea hlola e bona kapa ea hlasela lik'homphieutha tsa hau.

Mohato oa 4: Bakeng sa lik'hamera tsa IP tsa Generic / No-Name (ONVIF / RTSP), Thibela Marang-rang a Bona (WAN) Ho fihlella ka ho Feletseng¶

Haeba u sebelisa sebakeng seo RTSP / ONVIF lik'hamera tse nang le Home Assistant, Frigate, Scrypted, Blue Iris, kapa Synology Surveillance Station, lik'hamera tseo ** ha li hloke ho kena inthaneteng ho hang**: - Leqepheng la router ea hau ea Firewall / Controls Controls / MAC Filtering, abela khamera aterese ea IP ea DHCP e tsitsitseng 'me u hlahlobe "Thibela Internet Access (WAN Block)" bakeng sa aterese ea MAC ea khamera eo. Khamera e ntse e ka phallela video e hlalosang boemo bo holimo sebakeng sa hau sa lehae holim'a marang-rang a sebaka sa heno, ha e ntse e fetoha karolo ea 100 lekholong e sa khoneheng hore mang kapa mang ea ka ntle ho ntlo ea hau a fihle k'hamera kapa hore khamera e founele hae ho li-server tsa P2P tsa mose ho maoatle.

Mokhahlelo oa 5: Ho Thatafatsa Boinotši ba 'Mele bakeng sa Baoki le Likamore tsa ho robala¶

Ha ho firewall ea software e tšepahalang joalo ka fisiks ea 'mele. Kenya ts'ebetsong melao ena e mene bakeng sa k'hamera efe kapa efe ka tlung:

• Le ka mohla u se ke oa beha kh'amera ea Wi-Fi e hoketsoeng ka maru ka har'a kamore ea batho ba baholo kapa kamore ea ho hlapela, 'me u supe li-monitor tsa bana FEELA betheng: Eketsa sebaka sa bana ho ea tlase e le hore feela bokahare ba bethe bo be teng ka foreiming - ha ho na tafole e fetohang, setulo sa booki kapa monyako oa kamore.
• Fetolela ho Non-Wi-Fi Closed-Loop DECT 6.0 kapa Dijithale FHSS Tlhokomelo ea Bana bakeng sa Nursery: Li-monitor tsa video tsa radio tsa lehae (joalo ka Infant Optics DXR-8 Pro, Eufy SpaceView mokhoa oa lehae, VTech non-Wi-Fi, kapa Babysense) e na le zero Wi-Fi chip, akhaonto ea leru ea zero, le khokahanyo ea inthanete e se nang letho. Hobane ha li hokahane le router ea hau kapa marang-rang, ha ho senokoane sa toropo kapa naheng e 'ngoe se ka khonang ho li kenya kapa ho li koetela.
• Sebelisa Physical Lens Cap kapa Smart Plug Power Schedule ho Likhamera tsa Kamore ea Bolulo ea Ka Hare: Hokela lik'hamera tsa lapeng kapa tsa kamore ea ho phomola ho sebali sa nako e bonolo kapa polaka e bohlale ho tsoa ho morekisi ea fapaneng kahoo matla a khaoha ho khamera neng kapa neng ha u le hae, kapa u reke lik'hamera tse nang le mochini o koalang lense mme o hakolle potoloho ea maekerofounu ha o koetsoe.
• **Tlohela LED ea Boemo ba Khamera (Blue / Red Recording Light) E lumelletsoe : Bahlaseli ba bangata hang-hang ba kena litlhophisong tsa khamera ebe ba reteleha Status LED = OFF kahoo u ke ke ua hlokomela ha ba hokela ho shebella Live View. Lekola litlhophiso tsa sesebelisoa sa kh'amera ea hau 'me u boloke lets'oao la boemo ba ho rekota LED e butse ** ON, 'me u koahele pinana ea maekrofono ka theipi e teteaneng ea motlakase haeba u sa sebelise molumo oa mahlakore a mabeli.

Linomoro tsa libaka tsa tšohanyetso le liprothokholo tsa mekhatlo¶

Ho fihlella ka mokhoa o sa lumelloeng ho khamera ea ts'ireletso ea lapeng kapa ho shebella lesea ke tlolo ea molao e tebileng ea ho kena ka har'a komporo le voyeurism. E tlalehe hang-hang:

• United States: Letsetsa 911 ha o belaela hore motho ya itshupang a le haufi le lehae la hao. Kenya tlaleho ho FBI IC3 (ic3.gov) ho kenyelletsa le linepe tsa ho kena ho sa lumelloeng, aterese ea IP, le setempe sa nako (18 U.S.C. § 1030 CFAA le 18 U.S.C. § 2261A), le ho tlaleha lisebelisoa tse sa sireletsehang tsa IoT ho FTC (ReportFraud.ftc.gov).
• Canada: Letsetsa 911, kenya tletlebo ea sepolesa tlas'a Karolo ea 342.1 le 162 (Voyeurism) ea Criminal Code of Canada, 'me u tsebise Setsi sa Canada sa Tšireletso ea Cyber ​​(cyber.gc.ca).
• United Kingdom: Daela 999 (kapa 101 bakeng sa mapolesa a seng a tšohanyetso) le ho tlaleha phihlello e sa lumelloeng tlasa Computer Miuse Act 1990 ho Action Fraud (0300 123 2040 / actionfraud.police.uk).
• European Union: Letsetsa 112 ho phatlalla le linaha tsohle tseo e leng litho tsa EU le ho kenya tletlebo ea botlokotsebe ho mapolesa a naha a cybercrime.
• Australia le New Zealand: Letsetsa 000 Australia kapa 111 New Zealand; tlaleha ho ACSC (cyber.gov.au / 1300 292 371) kapa CERT NZ (0800 237 869).
• India le Asia-Pacific: Daela 112 bakeng sa karabelo ya tshohanyetso kapa 1930(cybercrime.gov.in) ho tlaleha phihlello e sa dumellwang ya khamera tlasa Dikarolo tsa 66 le 66E tsa Molao wa Thekenoloji ya Boitsebiso, 2000.

Lipotso tse botsoang khafetsa¶

Nka tseba joang haeba motho ea buileng ka k'hamera ea ka e le motho ea senyang marang-rang khahlanong le motho ea tobaneng le ntlo ea ka?¶

Sheba lintho tse peli: (1) A na u sebelisitse hape lengolo-tsoibila le phasewete tsa ak'haonte ea hau libakeng tse ling ntle le ho lumella Netefatso ea Lintlha tse peli (`2FA`)? Le (2) lentswe le ne le reng? Maemong a fetang 90 lekholong moo motho eo a sa mo tsebeng a hoeletsang mantsoe a hlabang, a bapalang 'mino, kapa a ipolela hore ke "Santa Claus" kapa senokoane. Letsetsa, Wyze, kapa Sehlaha khamera, ke monyetla oa tlhaselo ea ho kenya litokomane: li-bots tse iketselitseng li lekile limilione tsa li-imeile / li-password tse lutiloeng ho tsoa ho litlolo tsa khale tsa data (`haveibeenpwned.com`), e fumane hore phasewete ea hau e sebelitse ho Ring/Wyze, le ho trolls sethaleng sa marang-rang kapa seva sa Discord se hokahaneng le lik'hamera tse ngata tse sa reroang hang-hang ntle le ho tseba hore na u lula motseng ofe kapa seterekeng sefe. Ka lehlakoreng le leng, haeba u ne u se u ntse u e-na le li-passwords tse ikhethang tse nang le Authenticator 2FA e nolofalitsoeng - kapa haeba lentsoe le ne le tseba mabitso a litho tsa lelapa la hau, kemiso ea sebaka sa heno, kapa le tlile ka ketsahalo e sa lebelloang ea radio-Wi-Fi. eo e neng e le molekane, kapa moahelani le ho tsebisa mapolesa a lehae hang-hang.

Hobaneng lense ea enjene ea khamera ea ka e sisinyeha kapa e tobetse ka bo eona bosiu - na hoo ho bolela hore sebatli se ntse se shebelletse kamehla?¶

Ha se kamehla - ho na le mabaka a mararo a boits'oaro a kh'amera e tobehang kapa e tsamaeang bosiu ao u lokelang ho a qoba ka mor'a ho hlahloba lintlha tsa hau tsa ho kena: (1) Infrared (`IR`) Seha ho Tlanya Filter: Ha mabone a phaposi a theohile ka shoalane kapa ha lebone la koloi le feta, solenoid e sebetsang ka har'a kh'amera e thellisa filtara ea infrared ka har'a lense ka molumo o utloahalang. "click-click" molumo; (2) Firmware e iketsang e qala hape le ho lekanya: Hoo e batlang e le li-pan-and-tilt tsohle tsa motorized (`PTZ`lik'hamera (`Wyze Cam Pan`, `Eufy Indoor Cam Pan`, `Tapo`, `Reolink`) kenya liapdeite tsa othomathike tsa firmware lipakeng tsa 2:00 AM le 4:00 AM, 'me ha li qala bocha, li-stepper motors li bilika ka bo eona likhato tse 360 ​​ho tloha ho le letšehali ho ea ho le letona le ho ea holimo ho ea holimo ho lekanya boemo ba bona ba lapeng; le (3) Auto-Motion Tracking: Haeba "Motion Tracking" e lumelletsoe ho sesebelisoa, fene ea siling, phoofolo ea lapeng, kapa mote oa lerole ka pel'a lebone la infrared le ka etsa hore lense e otle ka phapusing. Sheba lisebelisoa tsa hau Lisebelisoa tse lumelletsoeng list le setempe sa nako ea ntlafatso ea firmware ho netefatsa.

A na nka qobella morekisi oa khamera ea ka (Ring, Wyze, Nest, Arlo, Nanit) ho mpolella aterese ea IP ea motho ea keneng akhaonteng ea ka mme a bua le ngoana oa ka?¶

Ee. Leha tšebeliso ea mantlha ea sesebelisoa e bontša mofuta oa sesebelisoa feela (joalo ka "Chrome ho Windows" kapa "iPhone") le toropo e hakanyetsoang, netefatso ea morao-rao ea morekisi le liseva tsa media tsa WebRTC li ngola hantle mohloli oa IPv4/IPv6, mohala oa Moemeli oa Mosebelisi, litempe tsa nako ea ho qala/qetello, le ketsahalo ea litsela tse peli tsa ho sebelisa molumo. Hang-hang bula tekete ea tšehetso le Sehlopha sa Ts'ireletso / Lekunutu sa morekisi se ba kopang ho boloka linetefatso tsohle le li-log tsa nako ea WebRTC bakeng sa ak'haonte ea hau, 'me ka nako e le' ngoe u fane ka tlaleho ea mapolesa a lehae le Kopo ea Phihlello ea Sehlooho sa GDPR/CCPA (`DSAR`) bakeng sa nalane ea IP ea ho kena ka botlalo akhaonteng ea hau.

Na sebali sa bana se reng "2.4 GHz FHSS" se bolokehile ho tsoa ho barekisi ba marang-rang?¶

E, ho tloha inthanete hackers/ Ketso ya ho qhekella: e inehetseng 2.4 GHz FHSS (Frequency-Hopping Spread Spectrum) e tlang le skrini sa eona sa motsoali e ts'oaroang ka letsoho mme e sena chip ea Wi-Fi kapa sesebelisoa sa smartphone e na le liperesente tse 100 tse sa sireletsehang ho barekisi ba marang-rang, ho kenya lintlha le bofokoli ba router. Leha ho le joalo, li-monitor tsa analog/FHSS tse sa ngolisoang ka theko e tlase kapa tsa khale ka linako tse ling li ka fumana tšitiso e khuts'oane ea seea-le-moea kapa lipuisano tse tsoang ho sebali se seng sa lesea, mohala o se nang mohala, kapa seea-le-moea se sa sebetseng kahare. limithara tse 90 ho isa ho tse 300 (maoto a 300 ho isa ho a 1,000). Ditsitithale tsa kajeno DECT 6.0 kapa li-monitor tsa FHSS tse patiloeng tsa AES-128 li thibela ho qhekella ha seea-le-moea feela.

Haeba ke ntša khamera bosiu bo le bong feela ebe ke e hokela hosane ntle le ho fetola phasewete ea ka, na senokoane se rahiloe?¶

Che. Ho ntša khamera ho fokotsa matla feela ha mohala o le ka ntle ho lebota. Milisecond o kenya kh'amera hosane ntle le ho hlakola linako, ho fetola phasewete ea hau ea leru, ho nolofalletsa 2FA, kapa ho tima router. UPnP, khamera e hokela hape akhaonteng e tšoanang ea leru (moo mohala oa mohlaseli o ntseng o kentsoe 'me o fumana tsebiso hanghang ea hore khamera ea hau e khutletse inthaneteng). Le ka mohla u se ke ua kenya kh'amera e senyehileng ho fihlela u qetile Mokhahlelo oa 3 le oa 4 ka holimo.

Ho thoe'ng haeba molekane oa khale ea hlekefetsang a kentse Ring, Nest, kapa Eufy lik'hamera ha re ne re lula 'moho 'me akhaonto ea "Mong'a / Mookameli oa Pele" e atereseng ea bona ea imeile?¶

Litsing tse bohlale tsa lapeng tse kang Letsetsa, Sehlaha, Arlo, le Eufy, "Mosebelisi ea Abelaneng" a ke ke a hlakola kapa a raha ak'haonte ea "Primary Owner" - mme leha o ka tobetsa konopo ea 'mele ea Factory Reset ho kh'amera ea Ring kapa ea Arlo, nomoro ea serial ea sesebelisoa/aterese ea MAC e lula e notletsoe ka mokhoa o hlakileng.`Device Theft / Ownership Lock`) ho akhaonto ea mantlha ea Mong'a ho fihlela ba tlanya "Tlosa Sesebelisoa" ho app ea bona. Haeba molekane oa mehleng ea hlekefetsang e le Mong'a lik'hamera, litloloko tsa mamati, kapa linotlolo tse bohlale ka tlung ea hau, qhaqha le ho theola lik'hamera tsa bona hang-hang, li nkele sebaka ka hardware e ngolisitsoeng ho akhaonto ea hau ea imeile e ncha, 'me u fetole lebitso la hau la marang-rang la Wi-Fi (`SSID`) le password hore lisebelisoa tsa bona tsa khale li se ke tsa hlola li hokela hape.

Litataiso tse amanang¶

• Smart home hack, ho koetela lik'hamera, le stalkerware
• Ho sireletsa li-routers tsa lapeng le lisebelisoa tsa IoT
• Litlhaselo tsa bot tse ikemetseng tsa bot ho limaele tse tšepahalang, likarete tsa limpho le liakhaonto
• Lehae le senyehileng kapa ofisi e nyane ea NAS (QNAP/Synology) le koung ea UPnP
• DNS hijacking, ISP router WAN reconfiguration, le botlamuoa portal spoofing
• Linomoro tsa maemo a tshohanyetso ho ea ka linaha

Mehloli le tataiso ea semmuso¶

• Federal Bureau of Investigation (FBI) (United States): *Phatlalatso ea Phatlalatso ea Phatlalatso I-123020-PSA & Smart Home IoT Advisories: Ho Sireletsa Lik'hamera tsa Smart, Bahlahlobi ba Bana, le Bathusi ba Mantsoe Khahlanong le Tšebeliso ea Boitsebiso le "Swatting" Hijacks *.
• Cybersecurity and Infrastructure Security Agency (CISA) & Setsi sa Naha sa Tšireletso (NSA) (United States): * Leqephe la Boitsebiso ba Cybersecurity: Ho Sireletsa Maqhubu a Se nang Waele, Ho Thibela UPnP, le ho Arola Lisebelisoa tsa Lehae tsa IoT ho Li-VLAN* tsa Baeti.
• Federal Trade Commission (FTC) (United States): Ho Sebelisa Lik'hamera tsa IP le Bahlahlobi ba Bana ba Khokahantsoeng Inthaneteng ka Polokeho.
• Setsi sa Naha sa Ts'ireletso ea Cyber ​​​​(NCSC) (United Kingdom): Lisebelisoa tse Bohlale ka Lapeng: Ho Hlophisa Lik'hamera, Bahlahlobisisi ba Bana, le Libuela-pele tse Smart Ka Sireletsehile & Tšireletso ea Sehlahisoa le Tataiso ea Molao ea Tšebeliso ea Mehala (PSTI).
• European Union Agency for Cybersecurity (ENISA): * Tataiso ea ho Sireletsa Inthanete ea Lintho (IoT) le Karolo ea Lehae la Lehae *.