An ethical hacker attempts to hack their way past ... hackers.
Indicates that the live feed is being delivered using "Motion JPEG" (MJPG), a common format for streaming video in a browser. "my location" or "new":
The existence of these search strings highlights a massive Internet of Things (IoT) security problem. A recent study by the security firm BitSight revealed that over are actively transmitting unencrypted real-time footage to the open internet. Many of these are home security cameras, baby monitors, or business surveillance systems whose owners are completely unaware their feeds are public. The issue stems from default settings on many IoT devices: they are designed for convenience, not security, with common flaws including default passwords, outdated firmware, and the lack of proper authentication on web interfaces. inurl viewerframe mode motion my location new
targets the specific URL structure used by older models of network cameras (often manufactured by Panasonic and other brands) to display live motion video frames.
The scale is staggering. At any given moment, tens of thousands of cameras are accessible in this manner. They watch over bedrooms, offices, laboratories, and even jail cells. They capture intimate family moments, confidential business discussions, and the comings and goings of unsuspecting individuals. The individuals on the other side of the lens are often entirely unaware that their "private" feed is being broadcast to anyone with a search engine and a curious mind. An ethical hacker attempts to hack their way past
If you must have remote access via the web, change the default username/password. Also, look for a setting called "HTTP Authentication" or "Security Level." Set it to "High" or "Digest."
The only true defense against this form of passive surveillance is to fundamentally change how we configure, use, and secure the technology we rely on. Until manufacturers prioritize security over convenience and until users adopt rigorous security habits (changing default passwords, disabling UPnP, and using VPNs), the internet will remain a place where a few words in a search bar can compromise the privacy of thousands. "my location" or "new": The existence of these
Millions of surveillance cameras are connected to the internet to allow home and business owners to monitor their property remotely. However, a significant percentage of these devices become publicly viewable due to a few common oversight errors:
One of the most peculiar and concerning search strings trending among security analysts and, unfortunately, malicious actors, is:
As we move into a "new" era of smart homes and AI-driven cameras, the lesson remains: Do not trust default settings. Do not trust the manufacturer. Treat every camera as if it is transmitting to the world unless you actively lock it down.