Umntu Othetha NgeMoni Yomntwana Wakho okanye Ikhamera yoKhuseleko oluSmart: Ukuvalwa kwangoko kunye nokuBekwa wedwa kweNethiwekhi¶

Ukuva ilizwi lomntu ongamaziyo ethetha nge-Wi-Fi yomntwana esweni umntwana wakho (Nanit, Owlet, Eufy, VTech, Lollipop, Motorola), ukubukela indlu Ring, Wyze, Arlo, Blink, Google Nest, okanye TP-Link Tapo Ikhamera enenjini kunye ne-lens ejikelezayo kwigumbi lakho lokulala yodwa, ibona ikhamera yeblue / ebomvu imeko ye-LED ikhanyisa ngo-2:00 AM, okanye ufumane Ecobee / Nest I-thermostat ehlakaniphile ikhe yaya kutsho kuma-32 degrees celcius (90 degrees Fahrenheit) luhlaselo oloyikekayo kwikhaya lakho. Nangona kunjalo, ngaphandle kokuba umntu ongamaziyo ungaphandle kweminyango yakho, oku phantse kusoloko kuyi-akhawunti yelifu ekude okanye i-router port-forwarding intrusion endaweni yokuba umntu ome ngaphandle kwefestile yakho. Ngaphezulu kweepesenti ezingama-90 zokuqweqwediswa kweekhamera zelizwi ngeendlela ezimbini kwenzeka ngenye yezi ndlela zimbini: (1) Ukufakwa kweNkcazelo ngokuzenzekelayo (apho abaphuli-mthetho be-intanethi bathatha i-imeyile endala kunye negama eliyimfihlo ophinde walisebenzisa kwindawo yokuthengisa eyaphukileyo kwaye uyifake kwi-bot engena kwi-intanethi yakho. Ring, Wyze, Nest, okanye usana esweni usetyenziso lwelifu olusuka kumawaka eekhilomitha kude), okanye (2) I-IP ethe ngqo yeNgingqi / UPnP IsiBonelelo sokuGqibela iZibuko (apho ikhamera ye-IP engafakwanga okanye irekhoda yevidiyo yenethiwekhi NVR esetyenzisiweyo UPnP ukuvula izibuko 554 RTSP, 80, okanye 8000 ngqo kwi-intanethi yoluntu kwaye yabhalwa yi Shodan.io injini yokukhangela). Ukuqina kwerouter yasekhaya ngokubanzi, jongana kwakhona ukukhusela iirotha zasekhaya kunye nezixhobo ze-IoT; ukuba ukrokrela ukuba iqabane langaphambili okanye umxhaphazi wasekhaya ulawula izitshixo kunye nezibane zendlu yakho iphela, yabona I-smart home hack, ukuqweqwedisa ikhamera, kunye ne-stalkerware; okanye ukuba isixhobo sakho sokugcina se-NAS sibethwe ecaleni kweekhamera zakho, jonga ikhaya elisengozini okanye iofisi encinci yeNAS kunye nokuvalwa kwe-UPnP. Ukuba uva izingqi zomzimba, ubone umntu kwipropati yakho, okanye ukwesaba ukhuseleko lwangoko losapho lwakho, tsalela inombolo yakho kaxakeka yendawo (911 eUnited States naseKhanada, 112 kwiManyano yaseYurophu, 999 eUnited Kingdom) kwangoko okanye ujonge uluhlu lwethu lwehlabathi lwe amanani kaxakeka.

Yenza oku ngoku¶

1. Khumula ngokwasemzimbeni intambo yamandla ukusuka ngasemva kwemonitha yomntwana okanye ikhamera yangaphakathi (kwaye ukhuphe nayiphi na ibhetri egciniweyo yangaphakathi) kwimizuzwana emi-5:
2. Musa ** musa ** ukuchitha ixesha lokuvula i-app yefowuni ukucima ikhamera "Cima" kwisofthiwe - umhlaseli onolawulo lolawulo lwe-akhawunti yefu unokuguqula isofthiwe "Indlela yaBucala" emva kwe-1 yesibini, kwaye ezinye iikhamera eziphazamisekileyo ziqhubeka nokuhamba komsindo nangona xa usetyenziso lubonisa ukuba ividiyo yevidiyo imisiwe. Tsala iplagi eludongeni okanye intambo yamandla ye-USB-C ngaphandle kwekhamera kwangoko.
3. Jonga zonke ezinye iikhamera ze-Wi-Fi zangaphakathi kumagumbi akho okulala, i-nursery, kunye neendawo zokuhlala kwaye uzikhuphe nazo. (Shiya ngaphandle kwindlela yokuqhuba/ikhamera yentsimbi yocango eplage kuphela emva kokuba ukhangele ukuba kukho umntu ongaphandle kwekhaya lakho na.)
4. ** UNGASHAYI iqhosha le-hardware "Ukuseta kwakhona iFactory" kwikhamera okanye uqalise kwakhona irutha yakho ye-Wi-Fi okwangoku **:
5. Ukucofa ukuSeta kwakhona kwikhamera okanye ukukhupha i-Wi-Fi router yakho yasekhaya isula iilogi eziguquguqukayo ze-RAM (DHCP leases, UPnP port mappings, NAT connection tables, kunye neklip zesiganeko samva nje selifu) ezibonisa idilesi ye-IP yomhlaseli, isitampu sexesha lokungena, kunye nokuba umhlaseli ungene ngeakhawunti yakho yelifu okanye ngenethiwekhi yakho yeWi-Fi yasekhaya.
6. ** Vula i-app yekhamera yefowuni yakho (Ring, Wyze, Nanit, Eufy, Arlo, Nest / Google Home) kwaye uthathe imifanekiso-skrini "yeZixhobo eziGunyaziweyo / eziNgeneyo" kunye "nabasebenzisi ekwabelwana ngazo" PHAMBI kokuba uzirhoxise**:
7. Jonga ngaphantsi Account Settings -> Authorized Client Devices / Login Activity / Shared Users. Umfanekiso wekhusi kuyo yonke imodeli yesixhobo (iPhone 15, Web Browser - Chrome on Windows, Android Emulator), indawo, kunye nesitampu sexesha kwingxelo yakho yamapolisa.
8. Ngokukhawuleza cofa ** Susa / uPhume kuzo zonke izixhobo , susa naziphi na ezingaziwayo ** Ekwabelwana ngazo / Abasebenzisi beeNdwendwe, tshintsha igama lokugqitha leakhawunti yakho libe igama eliyimfihlo eliyimfihlo elineempawu ezili-16+, kwaye uvule Uqinisekiso lwezinto ezimbini (2FA) usebenzisa i-App ye-Authenticator (ungaze u-SMS okanye i-imeyile ukuba usetyenziso luyaxhaswa).
9. Jonga ukuba ngaba usana lwakho luyimonitha kanomathotholo engeyo-Wi-Fi (FHSS 2.4 GHz okanye DECT 900 MHz) vs. Wi-Fi Cloud Monitor:
10. **Umahluko obalulekileyo wokhuseleko ngokwasemzimbeni : Ukuba esweni umntwana wakho akanayo iWi-Fi kwaye akukho app ye-smartphone (nje isikrini esizinikezeleyo sabazali kunye neyunithi yekhamera esebenzisa 2.4 GHz FHSS okanye unomathotholo we-analog), ayinakuqhekezwa kwi-intanethi. Ilizwi eliza kwimonitha yerediyo engeyiyo eye-Wi-Fi livela ngaphakathi ama-90 ukuya kuma-300 eemitha (ama-300 ukuya kwi-1,000 iinyawo) kwikhaya lakho - nokuba yintetho enqamlezileyo ngempazamo evela kummelwane wommelwane/i-walkie-talkie kwisitishi esifanayo, okanye umntu opake ngaphandle ngesisasazi sikanomathotholo. Ukuba ilizwi lithethe ngqo nomntwana wakho kwimonitha yerediyo engeyo-Wi-Fi, tshixa iingcango zakho kwaye ufowunele amapolisa kaxakeka (911 / 999 / 112) kwangoko.
11. **Ngena kwiWi-Fi Router yakho yasekhaya (192.168.1.1 okanye 192.168.0.1) kwaye ucime UPnP (Universal Plug and Play) kwaye ucime nayiphi na into engaziwayo Port Forwarding imithetho **:
12. Iikhamera zeP2P ezishibhile okanye ezimhlophe (VStarcam, Foscam, Tenvis, Hikvision, Dahua, CamHi) sebenzisa UPnP ukubetha ngokuthe cwaka amazibuko avulekileyo (554, 80, 8000, 37777) kwirouter firewall yakho ukuze nabani na avule Shodan.io unokujonga kwaye uthethe ngekhamera ngaphandle kokufuna igama lokugqitha lakho leWi-Fi.
13. Hambisa zonke iikhamera, iimonitha zomntwana, iithermostats ezihlakaniphileyo, kunye nezithethi ezikrelekrele kwi-Wi-Fi yekhaya lakho eliphambili kwaye uye kwindawo ekwanti. Guest Wi-Fi Network (okanye uzinikele IoT VLAN kunye Client Isolation yenziwe):
14. Nokuba iplagi ehlakaniphile, ivacuum yerobhothi, okanye imonitha yomntwana isengozini yelifu kwixesha elizayo, ukuyibeka yodwa kwiNdwendwe ye-Wi-Fi VLAN ithintela isixhobo esisengozini ekuskeneni okanye ekuhlaseleni iilaptops zomsebenzi wakho, iifowuni, okanye i-NAS drive yasekhaya.

Umthi wesigqibo: impendulo ekhawulezileyo xa umntu ongamaziyo ethetha okanye ehambisa ikhamera yasekhaya¶

Landela lo mthi wesigqibo phakathi kwemizuzu emi-2 yokuqala yesiganeko ukuvavanya ukhuseleko lomzimba, ulondoloze ubungqina, kwaye uvale umngeneleli ngaphandle:

flowchart TD
    Start["Ilizwi lomntu ongamaziyo eliviwe ngeMoni yoMntwana / iKhamera eSmart, okanye iLens yeKhamera ishukunyiswe yodwa."] --> UnplugNow["INYATHELO 1 (0 ukuya kwimizuzwana emi-5): Khupha iNtambo yaMandla ngokwaseMzimbeni (kwaye ukhuphe ibhetri) kwiKhamera ngoko nangoko."]

    UnplugNow --> MonitorType{"Ngaba lo Mjongi uQhagamshela kwi-Wi-Fi / i-App ye-smartphone, okanye ngaba siSijongi seRadiyo esiZinikezelweyo seNdawo (akukho Wi-Fi)?"}

    MonitorType -->|"Akukho Wi-Fi / Akukho App (Ezinikezelweyo 2.4 GHz FHSS okanye iSkrini soMzali seAnalog)"| RadioAlert["IXESHA LOKUXHUMELA: Umqondiso ovela kwi-90 ukuya kwi-300 yeemitha (300 ukuya kwi-1,000 Feet) yeKhaya lakho"]
    RadioAlert --> TalkDirect{"Ngaba Ilizwi Lathetha Ngqo kwigumbi lakho / kuMntwana, okanye isandi njengommelwane ongaqhelekanga / i-CB Cross-Talk?"}
    TalkDirect -->|"Thetha Ngokuthe ngqo / Ngobubi"| CallPoliceNow["Tshixa iingcango kunye neeWindows ngoko nangoko kwaye ufowunele u-911 / 999 / 112 ngokuJonga ukuPatroli wamaPolisa aNgaphandle"]
    TalkDirect -->|"Ummelwane oMfutshane / Walkie-Talkie Cross-Talk"| RePairChannel["Hlanganisa kwakhona iYunithi yoMzali kunye neKhamera ukuJikezisa i-FHSS yokutsiba iMbewu okanye Tshintshela kwi-DECT"]

    MonitorType -->|"Wi-Fi / Cloud App Camera (Ring, Wyze, Nanit, Eufy, Nest, Arlo, Generic RTSP)"| CloudVsLocal{"Ufike Njani Umngeneleli Kwikhamera?"}

    CloudVsLocal -->|"Vector A: Cloud Account Credential Stuffing (90% of Ring / Wyze / Nest / Nanit Cases)"| CloudLockdown["1. Umfanekiso weskrini oGunyaziweyo izixhobo kunye neMbali yoMsitho kwi-App -> 2. Hlehlisa zonke iiSeshini -> 3. Phinda umisele igama lokugqithisa + Yenza i-Authenticator 2FA"]

    CloudVsLocal -->|"IVector B: UPnP / Port Forward / Shodan Direct IP Stream (Generic ONVIF / RTSP / Foscam / Hikvision)"| RouterLockdown["1"]

    CloudVsLocal -->|"IVector C: Owayesakuba nguMlingane / Owayesakuba nguNdwendwe Wasekhaya / Iakhawunti Ekwabelwana Ngayo Yasekhaya"| SharedLockdown["1. Phicotha 'Abasebenzisi eKwabelwana Ngayo / Amalungu aseKhaya' kwi-App -> 2. Guqula iWi-Fi SSID & WPA2/WPA3 Password -> 3. Ukuseta kwakhona iFactory & Ukubophelela kwakhona iKhamera kwiAkhawunti Entsha"]

    CloudLockdown --> VLANIsolate["Inyathelo lokugqibela: Yenza iNdwendwe eLudwayo / iNethiwekhi ye-Wi-Fi ye-IoT (Ukwahlulwa koMxumi KUVULIWE) kwaye uphinde uQhagamshele kwakhona kuphela iZixhobo eziBalulekileyo eziBalulekileyo"]
    RouterLockdown --> VLANIsolate
    SharedLockdown --> VLANIsolate

Inqanaba loku-1: Ukufumanisa ukuba umhlaseli ungene njani kwikhamera yakho okanye kwi-thermostat¶

Phambi kokuba usete kwakhona nayiphi na into yasefektri, misela ukuba yeyiphi kwe indlela ezine zongenelelo umhlaseli azisebenzisileyo. Oku kukuxelela ukuba ngaba umhlaseli unofikelelo kuphela kwi-app yekhamera yelifu okanye ukuba inethiwekhi yakho ye-Wi-Fi yonke yasekhaya isengozini.

Inqanaba lesi-2: Ukugcina ubungqina phambi kokuba Uphinde Uyise (Imizuzu 2 ukuya kweye-15)¶

Ukuba umntu ongamaziyo uthethe nomntwana wakho, wahlukumeza usapho lwakho, okanye uye wahlola kwigumbi lokulala, eso senzo sisenzo esigwenxa sokungena kwikhompyuter kunye nesenzo esigwenxa. **Linda imizuzu eli-10 ukuze ubambe ezi ziqwenga zine zobungqina bedijithali ngaphambi kokuba wosule okanye ucime iiakhawunti **, kuba nje ukuba ucime isixhobo kwi-app yakho yelifu, iiseva zelifu lomthengisi zihlala zicoca iilog zeminyhadala kunye neekliphu zevidiyo kwangoko:

1. Khuphela iVidiyo/Ikliphu yeAudiyo kwiLifu leXesha leKhamera kwangoko:
2. Uninzi lweekhamera ezisebenzayo kunye neziqhubekayo-ezirekhodiweyo (Ring, Nest Aware, Wyze Cam Plus, Nanit, Arlo, Eufy) rekhoda isiphumo sesithethi saso kunye nempendulo yegumbi xa uthetha ngeendlela ezimbini (Live View) iyasebenza.
3. Vula umgca wexesha lembali yomsitho kwi-app umzuzu othe weva ilizwi, **khuphela i .mp4 ikliphu kuluhlu lwekhamera yefowuni yakho **, kwaye urekhode isikrini umgca wexesha obonisa isitampu sexesha esichanekileyo (HH:MM:SS ngezowuni yexesha).
4. Screenshot yeCamera App's "Izixhobo eziGunyaziweyo" kunye "noluhlu lwabasebenzisi ekwabelwana ngabo":
5. Iringi: Menu (≡) -> Control Center -> Authorized Client Devices KUNYE Shared Users.
6. kwiWyze: Account -> Security -> Manage Devices / Two-Factor Authentication KUNYE Account -> Sharing.
7. KwiGoogle Nest / Google Home: Ndwendwela myaccount.google.com/device-activity kwaye uvule Google Home -> Settings -> Household.
8. kwiArlo: Settings -> Profile -> Login Settings -> Trusted Devices KUNYE Settings -> Grant Access.
9. ** Gcina iRouter yakho yasekhaya System Log, DHCP Client Table, kwaye UPnP Table**:
10. Ngena kunxibelelwano lwewebhu yerouter yakho (http://192.168.1.1, http://192.168.0.1, okanye http://10.0.0.1).
11. Yiya ku Administration / System Log -> cofa **Gcina / Thumela iLog ** (le fayile yombhalo irekhodisha uqhagamshelo lwangaphakathi lwe-WAN, izicelo ze-port-mapping ye-UPnP, kunye neziganeko zoqinisekiso lwe-Wi-Fi MAC yendawo).
12. Thatha umfanekiso weskrini we DHCP Leases / Attached Devices uluhlu (ngokukodwa ukuqaphela idilesi ye-IP kunye ne-MAC yendawo yomntwana esweni / ikhamera) kunye UPnP / Port Forwarding iphepha.
13. Gcina iNombolo yothotho lweKhamera yePhysical, idilesi ye-MAC, kunye nekhadi le-MicroSD:
14. Ukuba ikhamera inomzimba **MicroSD ikhadi slot ** kwicala okanye ezantsi (Wyze, Eufy, Tapo, Reolink, Foscam), ** pop ikhadi le-MicroSD ngaphandle ngelixa ikhamera ikhutshiwe ** kwaye isilayidi i-block-blocker okanye ikopi imixholo yayo kwikhompyutheni ecocekileyo - iikhamera ezininzi zibhala zendawo .mp4 amacandelo kunye nendawo syslog.txt ifayile yokuxilonga ngokuthe ngqo kwikhadi le-SD nokuba umhlaseli ucime ikliphu yelifu.

Isigaba sesi-3: Ukugxotha uMhlaseli kwi-Akhawunti Yakho yeLifu (i-Brand-by-Brand Steps)¶

Nje ukuba ugcine izikrini zesikrini zezixhobo ezingagunyaziswanga, yenza iseshoni epheleleyo yokubulala kwikhamera yakho, isithethi esihlakaniphile, kunye namaqonga e-thermostat:

1. Amazon Ring, Blink, kwaye Echo / Alexa (Indlela ezimbini "Yehla" Abaqweqwedisi)¶

• Kwi-App yeRingi:
• Vula Menu (≡) -> Control Center -> Authorized Client Devices -> cofa "Susa zonke izixhobo".
• Thepha Control Center -> Shared Users -> susa nawuphi na umsebenzisi ongamaziyo.
• Thepha Control Center -> Account Verification -> tshintsha uQinisekiso lweeFactor ezimbini ukusuka ku-SMS Text ukuya ku-*I-App ye-Authenticator. 4.Chwetha Control Center -> Amazon Account Linking kwaye khangela ukuba i-akhawunti ye-Amazon engaqhelekanga idibene.
• Kwi-Amazon Alexa App (Kubalulekile ukuba ilizwi lize nge-Echo Dot / Echo Show):
• Uninzi "lokungena ngelizwi lesithethi esihlakaniphileyo" kwenzeka ngenxa yokuba ilungu losapho, iqabane langaphambili, okanye umhlaseli wenze ukuba I-Alexa "Drop In" (ejika isithethi se-Echo sibe yi-intercom yeendlela ezimbini ngoko nangoko ngaphandle kokuba nabani na osegumbini aphendule).
• Vula i- ** I-Alexa App -> Izixhobo -> khetha isithethi sakho se-Echo -> Useto (i icon yegiya) -> Unxibelelwano -> Yila ngaphakathi ** -> yisete ku Off (okanye My Household Only).
• Ndwendwela amazon.com -> Account & Lists -> Login & Security -> tshintsha igama eliyimfihlo kwaye uye ku Manage Your Content and Devices -> Devices ukucima ukubhalisa nayiphi na i-Echo engaziwayo, ithebhulethi yoMlilo, okanye ufakelo lwe-Alexa app.

2. Google Nest Iikhamera, iintsimbi zeengcango, iHub Max, kunye Nest Thermostats¶

1. Kuba iNest isebenzisa iAkhawunti kaGoogle, iNest camera okanye i-thermostat ithetha ukuba iakhawunti yakho yonke kaGoogle ichaphazelekile.
2. Vula kwangoko myaccount.google.com/device-activity -> phuma kuyo yonke ikhompyuter engaqhelekanga, ifowuni, okanye iseshoni.
3. Vula myaccount.google.com/connections (Iinkqubo zomntu wesithathu kunye neenkonzo) -> rhoxisa nayiphi na ibhulorho yasekhaya engaziwayo okanye uphawu lwe-OAuth.
4. Vula i-Google Home App -> Settings -> Household* -> susa nawuphi na umntu ekungafuneki aphinde afikelele kwikhaya lakho, kwaye ujonge Settings -> Works with Google ukuphelisa udibaniso olungaziwayo.

3. Wyze, Eufy, Arlo, TP-Link Tapo, kwaye Nanit / Owlet Baby Monitor¶

1. Guqula igama lokugqithisa leakhawunti ngoko nangoko kwi-app yakho yeselula.
2. Yenza I-App yoQinisekiso (TOTP) uQinisekiso lwezinto ezimbini ngaphakathi Account -> Security.
3. Iseshini-umqondiso obalulekileyo we-quirk kuhlahlo lwabiwo-mali lwe-IoT apps: Ezinye iimonitha zomntwana ezincinci kunye neekhamera ze-IP zekhamera ezibuyela ngasemva musa ukwenza ukuba ingasebenzi ngoko nangoko imijelo yevidiyo esebenzayo yeWebRTC / RTSP xa utshintsha igama lokugqitha uwedwa.
4. **Indlela yokunyanzela-ukubulala umlambo osebenzayo kuyo nayiphi na ikhamera yefu **: Emva kokutshintsha igama eligqithisiweyo kunye nokuvumela i-2FA, ** cima / susa ikhamera kwi-akhawunti yakho ngaphakathi kwe-app **, iplagi ikhamera kwakhona ngelixa ubambe iqhosha layo ** I-Factory Reset iqhosha le-15 imizuzwana **, kwaye uyidibanise ukusuka ekuqaleni. Ukubhanqa kwakhona kuvelisa ** ithokheni entsha yesixhobo se-cryptographic kunye neqhosha leseshoni ye-P2P UID **, ukuqhawula ngokusisigxina nawuphi na umlambo ojikelezayo.

4. Ecobee, Honeywell Home (Resideo), kunye ne-Smart Thermostats¶

Ukuba iqondo lobushushu le-thermostat liyatshintsha ngokwalo okanye libonisa imiyalezo engaqhelekanga: 1. Kuqala jonga ukuba ngaba into oyisebenzisayo yombane ikubhalisele kwi-automated iMpendulo yeMfuno / inkqubo yeNcopho yoGcina (Eco+ kwi-Ecobee okanye Seasonal Savings kwi-Nest) - izinto eziluncedo ziyakwazi ukuqhelanisa amaqondo obushushu nge-2 ukuya kwi-3 degrees celcius (3 ukuya ku-5 degrees Fahrenheit) ngexesha legridi yencopho ngaphandle kokuba ivaliwe. 2. Ukuba i-thermostat yayikrazulwe kubushushu obugqithisileyo / kubanda (32°C / 90°F okanye 10°C / 50°F) okanye i-PIN-itshixiwe ngumhlaseli: tsala i-thermostat faceplate ngqo eludongeni (esika i-24V yayo R/C ucingo lwamandla kwaye lumisa iziko/AC ngoko nangoko), phinda usethe igama eligqithisiweyo lelifu, urhoxise udibaniso lwe-API yomntu wesithathu (HomeKit, SmartThings, IFTTT), kwaye usete amanani ama-4 Ulawulo loFikelelo PIN kwiyunithi yethermostat phambi kokuyikrazula kwakhona edongeni.

Inqanaba lesi-4: Ukutshixa iNdlela yeKhaya lakho kunye nokwenza iVLAN yeeNdwendwe ezizimeleyo ze-IoT¶

Nokuba iiseva zamafu zomthengisi zikhuselekile, ikhamera okanye imonitha yomntwana ihleli kwiflethi enye 192.168.1.x Inethiwekhi ye-Wi-Fi njengeelaptops zakho zobuqu kunye neefowuni yingozi enkulu yokhuseleko. Landela la manyathelo mahlanu ukwenza lukhuni inethiwekhi yakho yasekhaya ngemizuzu eli-15:

Inyathelo 1: Khubaza UPnP (Universal Plug and Play) Ngokusisigxina¶

1. Ngena kwiphepha lakho lolawulo lwe-router (192.168.1.1 / 192.168.0.1 okanye nge-mesh router app yakho njenge Eero, Google Nest Wifi, TP-Link Deco, Netgear Orbi, UniFi, ASUS).
2. Yiya ku-Advanced -> NAT Forwarding / WAN -> UPnP.
3. Guqula UPnP ukuya OFF (Kukhubazekile) kwaye ucofe **Faka / Gcina **.
4. Kutheni oku kubalulekile: Nge UPnP icinyiwe, akukho khamera ikhohlakeleyo, i-smart TV, okanye i-NAS drive ngaphakathi kwendlu yakho ivumelekile ukuba ibuze i-router ukuba ivule i-port engenayo kwi-intanethi yoluntu ngasemva kwakho.
5. Jonga Port Forwarding / Virtual Servers kwaye DMZ: Qinisekisa ukuba itheyibhile yoThumelo lweZibuko ayinanto kwaphela (ngaphandle kokuba usebenzisa umncedisi ozibambeleyo ngabom uyayiqonda) kwaye DMZ ivaliwe.

Inyathelo lesi-2: Jonga idilesi yakho ye-IP kawonke-wonke Shodan.io¶

Ngaba uyafuna ukwazi ngemizuzwana ye-10 ukuba i-router yakho yasekhaya ibiveza nayiphi na ikhamera, imonitha yomntwana, umshicileli, okanye i-NAS port kwi-intanethi yoluntu? 1. Ndwendwela whatismyipaddress.com okanye ifconfig.me ukusuka kwiWi-Fi yasekhaya ukukopa idilesi yakho yoluntu ye-IPv4 (umzekelo, 203.0.113.45). 2. Yiya ku https://www.shodan.io kwaye ukhangele idilesi yakho ye-IP yoluntu (203.0.113.45). 3. Ukuba uShodan uthi "No information available" / 404, i-firewall yakho ye-router iba ngokufanelekileyo onke amazibuko. Ukuba iShodan idwelisa amazibuko avulekileyo (80, 443, 554 RTSP, 1935 RTMP, 8000, 8080, 37777), i-router yakho ibiveza izixhobo ngqo kwi-intanethi- iyakhubaza UPnP, icima iPort Forward, kwaye icinyiwe ** OFF Remote Web Management (WAN Admin)** kwirutha yakho ivala loo mazibuko ngoko nangoko.

Inyathelo 3: Hambisa zonke iiKhamera, iiMonitor zaBantwana, kunye neZixhobo eziSmart kwindawo ekwanti Guest Wi-Fi (okanye IoT VLAN)¶

Awudingi firewall yeshishini ebiza kakhulu ukwenza ulwahlulo lwenethiwekhi. ** I-99 ipesenti yabathengi be-Wi-Fi routers kunye ne-mesh systems (Eero, Netgear, ASUS, TP-Link, ISP gateways) inomsebenzi owakhelwe-ngaphakathi othi "Inethiwekhi yeWi-Fi yeeNdwendwe" esebenza njengeVLAN eyodwa**: 1. Kuseto lwerouter yakho, yenza i 2.4 GHz Guest Network Wi-Fi (yinike igama elizinikeleyo njenge Home_IoT_24 kunye neempawu eziqinileyo ezili-16 WPA2/WPA3 Igama lokugqitha lahluke ngokupheleleyo kwi-password yakho engundoqo ye-Wi-Fi). 2. Qinisekisa ibhokisi yokukhangela ebhalwe "Vumela iindwendwe zibonene kwaye zifikelele kwinethiwekhi yam yendawo" (Local Network Access / Intranet Access) AKUTEKIWE (Kukhubazekile) - kaninzi ibizwa ngokuba AP Client Isolation. 3. Setha kwakhona umzi-mveliso womntwana wakho, iikhamera ezikrelekrele, iiplagi ezikrelekrele, i-robot vacuum, kunye ne-smart thermostat, kwaye uziqhagamshele ** ngokukodwa kwi- Guest / IoT Wi-Fi inethiwekhi**. 4. Gcina iilaptops zakho zobuqu, iiPC zedesktop, ii-smartphones, iitafile, kunye nokugcinwa kweNAS kwi-Main Wi-Fi Network* yakho. Ngoku, nokuba isixhobo se-IoT esinexabiso eliphantsi sine-zero-day firmware backdoor, sivaleleke kwitonela enebhokisi yesanti enokuthetha kuphela ne-intanethi kwaye ayinakuze ibone okanye ihlasele iikhompyuter zakho.

Inyathelo 4: YeGeneric / Akukho-Nagama Iikhamera ze-IP (ONVIF / RTSP), Vala i-Intanethi yabo (WAN) Ukufikelela ngokuPheleleyo¶

Ukuba usebenzisa lendawo RTSP / ONVIF iikhamera nge Home Assistant, Frigate, Scrypted, Blue Iris, okanye Synology Surveillance Station, ezo khamera ayifuni ukufikelela kwi-intanethi kwaphela: - Kwi-router yakho **I-Firewall / i-Parental Controls / i-MAC Filtering ** iphepha, yabela ikhamera idilesi ye-IP ye-DHCP emileyo kwaye ukhangele "Vimba uFikelelo lwe-Intanethi (i-WAN Block)" yaloo dilesi ye-MAC yekhamera. Ikhamera isenako ukusasaza ividiyo enenkcazo ephezulu yasekhaya kwi-hub yakho yasekhaya ngaphezulu kwenethiwekhi yendawo yakho, ngelixa iba yi-100 yeepesenti engenakwenzeka ngokwasemzimbeni ukuba nabani na ongaphandle kwekhaya lakho afikelele kwikhamera okanye ukuba ikhamera ifowunele ekhaya kwiiseva ze-P2P zaphesheya.

Inqanaba lesi-5: Ukuqina ngokwaseMzimbeni kwiNurseries kunye namagumbi okulala¶

Akukho firewall yesoftware inokuthenjwa njengefiziksi yomzimba. Sebenzisa le mithetho mine kuyo nayiphi na ikhamera ngaphakathi kwekhaya:

• Ungaze ubeke ikhamera ye-Wi-Fi eqhagamshelwe kwilifu ngaphakathi kwegumbi lokulala labantu abadala okanye igumbi lokuhlambela, kwaye ukhombe iimonitha zomntwana kwi-nursery KUPHELA kwibhedi: I-engeli yokujonga i-nursery ijonge ezantsi ukuze kuphela ingaphakathi lebhedi likwisakhelo - ayisokuze ibe yitafile etshintshayo, isitulo sabongikazi, okanye umnyango wegumbi lokulala.
• Tshintshela kwi-Non-Wi-Fi evaliweyo-Loop DECT 6.0 okanye iDijithali FHSS Umjongi womntwana kwiNursery: Iividiyo ezinikezelweyo zerediyo zasekhaya (ezinje Infant Optics DXR-8 Pro, Eufy SpaceView indlela yendawo, VTech non-Wi-Fi, okanye Babysense) babe zero Wi-Fi chip, zero akhawunti yelifu, kunye noqhagamshelo lwe-intanethi elinguziro. Ngenxa yokuba aziqhagamshelwanga kwi-router yakho okanye kwi-intanethi, akukho mgqekezi kwesinye isixeko okanye ilizwe onokuze azifakele izinto eziqinisekisayo okanye aziqweqwedise.
• Sebenzisa i-Fizical Lens Cap okanye iSmart Plug yeShedyuli yaMandla kwiCamera yaNgaphakathi kweGumbi lokuHlala: Xhuma isilwanyana sangaphakathi okanye iikhamera zegumbi lokuhlala kwisibali-xesha esilula okanye iplagi ehlakaniphile esuka kumthengisi owahlukileyo ukuze amandla asikwe ngokwasemzimbeni kwikhamera ngalo lonke ixesha usekhaya, okanye uthenge iikhamera ezinomatshini wokuvala ihardware ovala ngokwasemzimbeni ilens kwaye uqhawule isekethe yemakrofoni xa ivaliwe.
• **Shiya ubume beKhamera ye-LED (Blue / Red Recording Light) Yenza **: Abahlaseli abaninzi bangena ngokukhawuleza kwiisetingi zekhamera kwaye bajike Status LED = OFF ngoko awuyi kuqaphela xa beqhagamshela ukubukela Live View. Jonga useto lwekhamera yakho kwaye ugcine isalathisi semo yokurekhoda i-LED ivuliwe ** ON **, kwaye ugqume umbhobho wemakrofoni ngeteyiphu eshinyeneyo yombane ukuba awuzange usebenzise iaudio yeendlela ezimbini.

Iinombolo zengingqi zikaxakeka kunye neeprothokholi ze-arhente¶

Ufikelelo olungagunyaziswanga kwikhamera yokhuseleko lwasekhaya okanye imonitha yosana lungenelelo olukhulu lwekhompyuter kunye nolwaphulo-mthetho lwe-voyeurism. Xela ngoko nangoko:

• United States: Cofa 911 ukuba ukrokrela ukuba umntu ongenelelayo ukufuphi nekhaya lakho. Faka ingxelo e-FBI IC3 (ic3.gov)* kuquka iifoto zekhusi zokungena okungagunyaziswanga, idilesi yeIP, kunye nesitampu sexesha (18 U.S.C. § 1030 CFAA kunye 18 U.S.C. § 2261A), kwaye unike ingxelo yehardware ye-IoT engakhuselekanga kwi FTC (ReportFraud.ftc.gov).
• Canada: Cofa 911, faka isikhalazo samapolisa phantsi kwe-Icandelo le-342.1 kunye ne-162 (iVoyeurism) ye-Criminal Code of Canada, kwaye yazise iZiko laseKhanada loKhuseleko lwe-Cyber ​​(cyber.gc.ca).
• United Kingdom: Cofa 999 (okanye 101 kumapolisa angengawo awexesha likaxakeka) kunye nokuxela ukufikelela okungagunyaziswanga phantsi koMthetho oyiComputer Miuse Act 1990* kuAction fraud (0300 123 2040 / actionfraud.police.uk).
• I-European Union: Cofa 112 kuwo onke amazwe angamalungu e-EU kwaye ufake isikhalazo solwaphulo-mthetho kumapolisa esizwe olwaphulo-mthetho.
• Ostreliya neNew Zealand: Cofa 000 eOstreliya okanye 111 eNew Zealand; ingxelo ku ACSC (cyber.gov.au / 1300 292 371) okanye CERT NZ (0800 237 869).
• I-Indiya kunye ne-Asia-Pacific: Cofa 112 impendulo kaxakeka okanye 1930 (cybercrime.gov.in) ukunika ingxelo ngofikelelo lwekhamera olungagunyaziswanga phantsi kweCandelo lama-66 kunye nelama-66E loMthetho wobuChwepheshe boLwazi, ka-2000*.

Imibuzo edla ngokubuzwa¶

Ndingazi njani ukuba umntu othethe ngekhamera yam ngumntu ongekhoyo kwi-intanethi xa ethelekiswa nomntu ojolise kwindlu yam?¶

Jonga izinto ezimbini: (1) Ngaba uye waphinda wasebenzisa i-imeyile yeakhawunti yakho yecamera kunye negama lokugqitha kwezinye iiwebhusayithi ngaphandle kokwenza uQinisekiso lweMiba emibini (`2FA`)? Kwaye (2) lathini ilizwi? Kwiimeko ezingaphezu kwama-90 ekhulwini apho umntu ongamaziyo ekhwaza amazwi akrwada, adlale umculo, okanye athi “uSanta Claus” okanye umgebenga Ring, Wyze, okanye Nest ikhamera, yi uhlaselo olungenelelayo lokufaka iziqinisekiso: ii-bots ezizenzekelayo zivavanye izigidi zee-imeyile ezivuzayo/i-password pairs ukusuka kukwaphulwa kwedatha yakudala (`haveibeenpwned.com`), wafumanisa ukuba igama lokugqitha lakho lasebenza kwi Ring/Wyze, kwaye licofa kwiforum ye-intanethi okanye iDiscord iseva eqhagamshelwe kuninzi lweekhamera ezingalindelekanga ngaxeshanye ngaphandle kokwazi nokuba yeyiphi idolophu okanye ilizwe ohlala kulo. Ngokuchaseneyo, ukuba sele unamagama agqithisiweyo awodwa kunye ne-Authenticator 2FA inikwe amandla - okanye ukuba ilizwi laliwazi amagama amalungu osapho lwakho, ishedyuli yendawo, okanye leza nge-non-Wi-Fi esweni isiganeko se-Wi-Fi owayesakuba liqabane, okanye ummelwane kwaye wazise amapolisa asekuhlaleni ngokukhawuleza.

Kwakutheni ukuze ilensi yekhamera yekhamera yam ishukume okanye icofe yodwa ebusuku- ingaba loo nto isoloko ithetha ukuba ihacker ibukele?¶

Akusoloko kukho izizathu ezithathu zoomatshini ezibonisa ukuba ikhamera icofa okanye ihambe ebusuku onokuthi ukhutshelwe ngaphandle emva kokujonga iilogi zakho zokungena: (1) I-infrared (`IR`) Sika Ucofa Isihluzo: Xa isibane segumbi sisihla ngorhatya okanye xa isibane semoto sidlula, isolenoid yomatshini ngaphakathi kwekhamera isilayita ngokwasemzimbeni isihluzo se-infrared kwilensi ngelizwi elivakalayo. "cofa-cofa" isandi; (2) I-Automatic Firmware Reboot & Calibration: Phantse yonke i-pan-and-tilt enemoto (`PTZ`iikhamera (`Wyze Cam Pan`, `Eufy Indoor Cam Pan`, `Tapo`, `Reolink`) faka uhlaziyo lwe-firmware oluzenzekelayo phakathi kwe-2: 00 AM kunye ne-4: 00 AM, kwaye emva kokuqalisa kwakhona, ii-motor zabo ze-stepper zijikeleza ngokuzenzekelayo i-360 degrees ekhohlo ukuya ekunene kunye nokunyuka-ukuya-phantsi ukulinganisa indawo yabo yasekhaya; kunye (3) Ukulandelela okuzenzekelayo kokuhamba: Ukuba "Ukulandelela iMotion" kuvuliwe kwi-app, ifeni yesilingi, isilwanyana sasekhaya, okanye i-mote yothuli phambi kwe-infrared LED inokubangela ukuba ilensi ijikeleze kwigumbi. Jonga i-app yakho Izixhobo ezigunyazisiweyo uluhlu kunye nesitampu sexesha sohlaziyo lwe-firmware ukuqinisekisa.

Ngaba ndinganyanzela umthengisi wekhamera yam (Ring, Wyze, Nest, Arlo, Nanit) ukundixelela idilesi ye-IP yomntu ongene kwiakhawunti yam wathetha nomntwana wam?¶

Ewe. Nokuba ujongano lomsebenzisi olusisiseko lubonisa kuphela uhlobo lwesixhobo (njenge "Chrome kwiWindows" okanye "iPhone") kunye nesixeko esiqikelelweyo, uqinisekiso lwangasemva lomthengisi kunye neeseva zemidiya zeWebRTC ziloga kanye umthombo wedilesi ye-IPv4/IPv6, umtya woMsebenzi woMsebenzi, izitampu zeseshoni zokuqalisa/ukuphela, kunye nesiganeko esineendlela ezimbini zokuvula isandi. Kwangoko vula itikiti lenkxaso kunye noKhuseleko lomthengisi / Iqela laBucala elibacela ukuba benze njalo gcina lonke uqinisekiso kunye neelog zeseshoni yeWebRTC kwiakhawunti yakho, kwaye ngaxeshanye ufake ingxelo yamapolisa asekuhlaleni kunye ne-GDPR/CCPA Isicelo sokuFikelela kwiSifundo (`DSAR`) yeakhawunti yakho yokungena kwimbali ye-IP epheleleyo.

Ngaba i-monitor yomntwana ethi "2.4 GHz FHSS" ikhuselekile kubaduni be-intanethi?¶

Ewe, ukusuka intanethi hackers: ozinikeleyo 2.4 GHz FHSS (I-Frequency-Hopping Spread Spectrum) ebeka iliso eza nescreen sayo somzali esibambe ngesandla kwaye ayinayo i-Wi-Fi chip okanye i-app ye-smartphone i-100 yeepesenti ikhuselekile kubaduni be-intanethi, ukuhlohlwa kwesiqinisekiso, kunye nokuba semngciphekweni kwe-router. Nangona kunjalo, iimonitha ze-analog/FHSS ezingabizi ngexabiso eliphantsi okanye ezindala zinokuthatha isiphazamiso esifutshane sikanomathotholo okanye intetho enqamlezayo ukusuka kwelinye iliso lomntwana, ifowuni engenantambo, okanye unomathotholo we-amateur ngaphakathi. 90 ukuya 300 yeemitha (300 ukuya 1,000 iinyawo). Idijithali yanamhlanje I-DECT 6.0 okanye iimonitha ze-FHSS ezifihliweyo ze-AES-128 zithintela ukujongwa kwerediyo.

Ukuba ndikhupha nje ikhamera ngobusuku kwaye ndiyiplage kwakhona ngomso ngaphandle kokutshintsha igama lam eliyimfihlo, ngaba i-hacker ikhatyiwe?¶

Hayi. Ukukhupha ikhamera kuphela kusika amandla ngelixa intambo ingaphandle kodonga. I-millisecond uyiplaga ikhamera ngomso ngaphandle kokurhoxisa iiseshoni, ukutshintsha igama eligqithisiweyo lelifu, ukwenza i-2FA, okanye ikhubaze i-router. I-UPnP, ikhamera iphinda idibanise kwi-akhawunti yefu efanayo (apho ifowuni yomhlaseli isangena kwaye ifumana isaziso sokutyhala ngokukhawuleza ukuba ikhamera yakho ibuyele kwi-intanethi). Ungaze uplage ikhamera esetyenzisiweyo ude ugqibe iSigaba sesi-3 nesesi-4 ngasentla.

Kuthekani ukuba iqabane elixhaphazayo langaphambili lifake i Ring, Nest, okanye Eufy iikhamera xa sihlala kunye kwaye i-akhawunti "yoMnikazi / yoMlawuli oyiNtloko" ikwidilesi ye-imeyile YABO?¶

Kwi-smart-home ecosystems njenge Ring, Nest, Arlo, kwaye Eufy, "uMsebenzisi oKwabelwana ngawo" akakwazi ukucima okanye ukukhaba i-akhawunti "yoMnini oPhambili" - kwaye nokuba ucinezela iqhosha le-Factory Reset ebonakalayo kwi-Ring okanye kwikhamera ye-Arlo, inombolo ye-serial yesixhobo / idilesi ye-MAC ihlala itshixiwe ngokufihlakeleyo (`Device Theft / Ownership Lock`) kwiakhawunti yoMnini yoqobo bade bacofe u-"Susa isiXhobo" kwi-app yabo. Ukuba iqabane langaphambili elixhaphazayo nguMnikazi obhalisiweyo weekhamera, iintsimbi zomnyango, okanye izitshixo ezikrelekrele ekhayeni lakho, bakhuphe kwaye bathathe iikhamera zabo ngoko nangoko, endaweni yazo ngehardware ebhaliswe ngokukodwa kwiakhawunti yakho ye-imeyile entsha kraca, kwaye utshintshe igama lakho lomsebenzi womnatha weWi-Fi (`SSID`) kunye negama lokugqitha ukuze izixhobo zabo ezindala zingaze ziphinde ziqhagamshele.

Izikhokelo ezinxulumeneyo¶

• I-Smart home hack, ukuqweqwedisa ikhamera, kunye ne-stalkerware
• Ukukhusela iirotha zasekhaya kunye nezixhobo ze-IoT
• Uhlaselo lwe-bot oluzenzekelayo kwiimayile zokunyaniseka, amakhadi esipho, kunye neeakhawunti
• Ikhaya elisengozini okanye i-ofisi encinci ye-NAS (QNAP/Synology) kunye nokuvalwa kokuthunyelwa kwezibuko le-UPnP
• Ukuqweqwediswa kwe-DNS, uhlengahlengiso lwe-ISP umzila we-WAN, kunye nokubanjwa kwe-portal spoofing
• Amanani kaxakeka ngokwelizwe

Imithombo kunye nezikhokelo ezisemthethweni¶

• Federal Bureau of Investigation (FBI) (eUnited States): *Isibhengezo seNkonzo yoLuntu i-I-123020-PSA kunye neeNgcebiso ze-IoT zeKhaya le-Smart: Ukukhusela iiKhamera ze-Smart, iiMonitor zeNtsana, kunye nabaNcedisi beLizwi ngokuchasene nokuGcinwa kweCredential kunye ne-"Swatting" Hijacks *.
• I-Arhente yoKhuseleko lwe-Cybersecurity kunye ne-Infrastructure Security Agency (CISA) kunye ne-Arhente yoKhuseleko lweSizwe (NSA) (eUnited States): * IPhepha leNgcaciso ye-Cybersecurity: Ukukhusela iiNethiwekhi ezingenazintambo, ukuKhubaza i-UPnP, kunye nokwahlulahlula iZixhobo ze-IoT zasekhaya kwiiNdwendwe zeVLAN*.
• IKomishoni yoRhwebo yoMdibaniso (FTC) (eUnited States): Ukusebenzisa iiKhamera ze-IP kunye neeMonitor zaBantwana eziQhagamshelwe kwi-Intanethi ngokuKhuselekileyo.
• Iziko leSizwe loKhuseleko lweCyber (NCSC) (eUnited Kingdom): * Izixhobo ezihlakaniphile kwiKhaya: Ukuseta iiKhamera, iiMonitor zeNtsana, kunye nezithethi ezihlakaniphile ngokuKhuselekileyo kunye noKhuseleko lweMveliso kunye neZiseko zoNxibelelwano lweTele (PSTI) isiKhokelo *.
• I-Arhente yeManyano yaseYurophu yoKhuseleko kwiCybersecurity (ENISA): * Izikhokelo zoKhuseleko lwe-Intanethi yezinto (i-IoT) kunye neCandelo leNethiwekhi yeKhaya *.