Shodan Safari, where hackers heckle the worst devices put on the internet

by

in

Should you leave anything on the world wide web long enough, someone will hack it.

The reality is that many device manufacturers make it far simpler by using default passwords which are widely recorded, allowing anyone to log into as “admin” and snoop around. Frequently, there’s still ’s no password in any respect.

Input “Shodan Safari,” a popular part-game, part-expression of catharsis, in which hackers tweet and discuss their worst finds on Shodan, also a search engine for exposed devices and databases popular with security researchers. Virtually whatever links to the web becomes scraped and tagged in Shodan’s vast search engine — such as what the device does and net ports are open, which helps Shodan know what the gadget is. If a particular port is open, it could be a webcam. If particular header comes back, it’s backend might be viewable in the browser.

Think of Shodan Safari as net dumpster diving.

By cameras to routers, hospital CT scanners to airport explosive detector units, you’d be amazed — and depressed — in what you can find exposed on the open net.

Just like a toilet, or prized pot plant, or — as we see beneath — somebody ’s actual goat.

GOATCAM (.nl)https://t.co/G8i0MhZ71G#shodansafari

— Morbid Angel 🔞 (Codename: DRAKO) (@m0rb) November 13, 2018

The reality is that Shodan disturbs people — and it should. It’s a window to the world of absolute insecurity. It’s not only exposed apparatus but databases — storing anything from two-factor codes into your own voter records, and in which you’re going to the gym . But apparatus take up the bulk of what’s out there. Exposed CCTV cameras, license plate readers, sex toys, and intelligent appliances. When it’s out there and exposed, it’s probably on Shodan.

When there’s ever a lesson to apparatus makers, not everything must be connected to the web.

Here’s some of the oddest things we’ve found so far. (And ’s at which to send your greatest findsout )

An office air-conditioning controller. (Screenshot: Shodan)

A weather station track with an airport in Alabama. (Screenshot: Shodan)

An online financial system in a co-operative credit bank in India. (Screenshot: Shodan)

For some reason, a beef factory. (Screenshot: Shodan)

An electric audio carillon near St. Louis. Used for creating church bell melodies. (Screenshot: Shodan)

A bio-gas creation and refinery plant in Italy. (Screenshot: Shodan)

A bird. Only a bird. (Screenshot: Shodan via @Joshbal4)

A brewery in Los Angeles. (Screenshot: Shodan)

The rear end of a theatre ’s projector system. Many just run Windows. (Screenshot: Shodan via @tacticalmaid)

The engine space of some Dutch fishing boat. (Screenshot: Shodan)

An explosive residue detector at Heathrow Airport’s Terminal 3. (Screenshot: TechCrunch)

A fish tank water controller and temperature monitor. (Screenshot: Shodan)

A climate control system for a flower store in Colorado Springs. (Screenshot: Shodan)

The web interface to get a Tesla PowerPack. (Screenshot: Shodan via @xd4rker)

An Instagram auto-follow bot. (Screenshot: Shodan)

A terminal used by a pharmacist. (Screenshot: Shodan)

A control for video shows and speakers in a Phil’s BBQ restaurant in Texas. (Screenshot: Shodan)

A Kodak Lotem printing media. (Screenshot: Shodan)

Somebody ’s hacked lawn irrigation system. Yes, that’s Rick Astley. (Screenshot: Shodan)

A sulfur dioxide detector. (Screenshot: Shodan)

An internet-connected knee recovery system. (Screenshot: Shodan)

But a really old version of Windows XP still in life. (Screenshot: Shodan)

A person ’s workout machine. (Screenshot: Shodan)

Cybersecurity 101: Five easy security hints for protecting your privacy


Buy Tickets for every event – Sports, Concerts, Festivals and more buytickets.com

Discover more from Teslas Only

Subscribe now to keep reading and get access to the full archive.

Continue reading