Please review the user manual for your DVR for instructions on changing your password. You can find links to manuals here: http://www.securitycameraworld.com/customer-service/downloads.asp If you still need help modifying your password or creating users, please call our tech support at 954-252-7090 and have your Invoice Number ready so we can assist you more efficiently.
Popular Surveillance Cameras Open to Hackers, Researcher Says
By Kim Zetter http://www.wired.com/threatlevel/2012/05/cctv-hack/
- Photo: redjar/Flickr
In a world where security cameras are nearly as ubiquitous as light fixtures, someone is always watching you.
But the watcher might not always be who you think it is.
Three of the most popular brands of closed-circuit surveillance cameras are sold with remote internet access enabled by default, and with weak password security — a classic recipe for security failure that could allow hackers to remotely tap into the video feeds, according to new research.
The cameras, used by banks, retailers, hotels, hospitals and corporations, are often configured insecurely — thanks to these manufacturer default settings, according
to researcher Justin Cacak, senior security engineer at Gotham Digital Science. As a result, he says, attackers can seize control of the systems to view live footage, archived footage or control the direction and zoom of cameras that are adjustable.
“You can essentially view these devices from anywhere in the world,” Cacak said, noting that he and his security team were able to remotely view footage showing security guards making rounds in facilities, “exceptionally interesting and explicit footage” from cameras placed in public elevators, as well as footage captured by one high-powered camera installed at a college campus, which had the ability to zoom directly into the windows of college dorm rooms.
Cacak and his team were able to view footage as part of penetration tests they conducted for clients to uncover security vulnerabilities in their networks. The team found more than 1,000 closed-circuit TV cameras that were exposed to the internet and thus susceptible to remote compromise, due to inherent vulnerabilities in the systems and to the tendency of the companies to configure them insecurely.
The inherent vulnerabilities, he said, can be found in at least three of the top makers of standalone CCTV systems that he and his researchers examined — MicroDigital, HIVISION, CTRing — as well as a substantial number of other companies that sell rebranded versions of the systems.
Control panel that a hacker can see, showing blurred-out video feeds from 16 closed-circuit TV cameras and the motion controls for tilting and turning the cameras remotely.CCTV video surveillance systems are deployed at entrances and exits to facilities as well as in areas considered to be sensitive, such as bank vaults, server rooms, research and development labs and areas where expensive equipment is located. Typically, the cameras are easily spotted on ceilings and walls, but they can also be hidden to monitor employees and others without their knowledge.
Obtaining unauthorized access to such systems could allow thieves to case a facility before breaking into it, turn cameras away from areas they don’t want monitored or zoom in on sensitive papers or prototype products at a workstation. The cameras could also be used to spy on hospitals, restaurants and other facilities to identify celebrities and others who enter.
Remote access capability is a convenient feature in many of CCTV systems because it allows security personnel to view video feed and control cameras via the internet with laptops or mobile phones. But it also makes the systems vulnerable to outside hackers, particularly if they’re not set up securely. If the feature is enabled by default upon purchase, customers may not know this is the case or understand that they should take special steps to secure the systems as a result.
“All the ones we found have remote access enabled by default,” Cacak says. “Not all the customers may be aware [of this]…. Because most people view these [video feeds] via console screens, they may not be aware that they can be remotely accessed.”
Compounding the problem is the fact that the systems come deployed with default easy-to-guess passwords that are seldom changed by customers. They also don’t lock-out a user after a certain number of incorrect password guesses. This means that even if a customer changes the password, an attacker can crack it through a bruteforce attack.
Many of the default passwords Cacak and his team found on CCTV systems were “1234″ or “1111.” In most cases the username was “admin” or “user.”
“We find about 70 percent of the systems have not had the default passwords changed,” Cacak said.
Because many customers who use the systems don’t restrict access to computers from trusted networks, nor do they log who is accessing them, Cacak said owners often cannot tell if a remote attacker is in their system viewing video footage from outside the network.
Log-in screen showing default username and password for a CCTV system accessible via the internet.To help companies determine if their CCTV systems are vulnerable, Cacak’s team worked with Rapid7 to produce a module for its Metasploit software targeting CCTV systems made by MicroDigital, HIVISION and CTRing or sold by other companies under a different name. Metasploit is a testing tool used by administrators and security professionals to determine if their systems are vulnerable to attack, but it’s also used by hackers to find and exploit vulnerable systems.
The module can determine if a specific user account, such as “admin,” exists on a targeted CCTV system, and it can also conduct automatic log-in attempts using known default passwords, brute force a password crack on systems using unknown passwords, access live as well as recorded CCTV footage, and redirect cameras that are adjustable. HD Moore, chief security officer at Rapid7, said they’re working on a scanner module that will help locate CCTV systems that are connected to the internet.
Earlier this year, Moore and another researcher from Rapid7 found similar vulnerabilities in video-conferencing systems. The researchers found they were able to remotely infiltrate conference rooms in some of the top venture capital and law firms across the country, as well as pharmaceutical and oil companies and even the boardroom of Goldman Sachs — all by simply calling in to unsecured videoconferencing systems that they found by doing a scan of the internet.
They were able to listen in on meetings, remotely steer a camera around rooms, as well as zoom in on items in a room to read proprietary information on documents.
Cacak said that customers using CCTV systems should disable remote access if they don’t need it. If they do need it, they should change the default password on the systems to one that is not easily cracked and add filtering to prevent any traffic from non-trusted computers from accessing the systems.
When deciding on hiring an installer to run cable or installing simple wireless cameras, make sure you know the numerous benefits of wired security cameras. Wired cameras offer security, no loss of signal due to interference, cannot be intercepted from outside the home, typically are of higher quality (more resolution), and can be changed seamlessly when upgrading in the future.
Security Cameras: Anything But Secure
Bloomberg Businessweek (Technology) by Jeff Green on May 3, 2012:
I recently installed a screen on the dashboard of my new pickup truck. The screen is configured to display video transmitted wirelessly from a camera installed on the truck’s bumper, a system designed to help avoid collisions while backing up. But the monitor picks up a lot more than intended. Driving through the suburbs outside Detroit, the screen first shows the feed from one home’s front-yard security camera. Next, surveillance footage from a party store appears. Then there’s the image of a crib transmitted by someone’s baby monitor.
Such accidental neighborhood spywork—which this reporter in no way intended—reveals a fact few people realize: Many of the wireless cameras used as baby monitors, home-security gear, and even business surveillance systems are startlingly susceptible to interception. “Wireless cameras are so easy to put in, that’s the selling feature,” says Christopher Charow, the lead investigator at Lakeside Investigations in Michigan, which also operates a security and spy-gear shop. “But if it’s security you want, you might be getting the exact opposite.”
Many of the wireless cameras in use transmit video over a slice of the airwaves known as 2.4 GHz, the same sliver used by cordless phones, says Charow. Because that spectrum is crowded with lots of devices, monitors meant for one camera often unintentionally pick up signals from another. With more sophisticated tools, available at spy shops such as Lakeside for a few hundred dollars, a person can easily detect and tune into any unencrypted signal. Charow, who uses such a device to search clients’ homes for hidden cameras, demonstrates how effective it is. As he drives through the Detroit metro area, he detects cameras that show the interior of a bicycle repair shop and several shots inside private residences.
Wireless cameras made by major electronics manufacturers in the last few years use technology that makes it much more difficult for accidental voyeurism, says Kelvin Chan, a manager at Infant Optics. His company and others sell video baby monitors that use so-called frequency hopping so wireless signals are received only by the intended monitor. But the encrypted cameras typically cost more than $100 and can top $300, says Rick Krupka, vice president of business sales at Binatone, which licenses the Motorola Mobility name to sell the most popular line of baby monitors at Amazon.com (AMZN) and other sites. The same sites also sell hundreds of models of baby monitors using the unencrypted 2.4 GHz technology, some for as little as $70.
Add in the fact that many baby monitors sold years ago are still in use, either because people kept them for new children or gave them away, and it’s likely that a large number of the cameras in use today have unencrypted feeds. IHS iSuppli (IHS), which tracks parts for various industries, estimates about 134 million image sensors of the kind used in baby monitors and security cameras were shipped between 2009 and 2011.
“People probably have no idea this isn’t secure,” Charow says of the unencrypted ones. He’s driving as he says this, with his scanner propped up on the dashboard. As if to underscore his point, the scanner beeps to signal that it’s detected a video feed. On the screen, an empty baby crib is clearly visible.
The bottom line: Cheap baby monitors and surveillance cameras use wireless technology that is easy to intercept, unintentionally or not.
Once every 15 seconds, a burglar breaks into a home in the US, but some things make your house a prime target. Not much will stop a burglar, but security cameras will make the would-be thief think twice. A suspect can break in, steal, and flee as sirens from an alarm system are ringing and be gone before the authorities arrive. Se…curity cameras will not only make a thief reconsider their actions, but also capture the incicent for prosecution purposes. Protect yourself, your family and your home. Installing cameras on the outide of your house will let burglars know what is waiting for them inside. Make them think twice, install a surveillance system. Just one camera at your front door can statistically increase your chances of not being broken into, saving you from a broken window, stolen property, and the psychological aftermath that a breakin can have on your whole family.
Almost every business can afford a video surveillance system. Even multi-camera systems are very reasonably priced and offer digital video recording and lots of digital storage space for footage. Small systems cost only a few hundred dollars, and even multi-camera systems are available for less than $2,000. Check your business insurance provider: video surveillance systems may entitle you to a discount.
Systems Becoming More Sophisticated
The days of VHS tapes being recorded over multiple times are gone. Today’s systems use digital video recorders that store images digitally, so that they won’t degrade no matter how many times they are viewed. Furthermore, many of today’s cameras have exceptional low-light recording ability, so that even dark alleys and corners can be viewed clearly. Some of today’s systems are designed to click on and start recording only when motion is detected.
Easy-to-Install Business Security Camera Systems
One of the best things about today’s business security camera systems is how easy they are to install. Many DIY types can install systems themselves, and if a professional is called in, the process is far less disruptive than it used to be. You don’t have to worry about walls having to be ripped out or installation taking days to complete. In many cases a system can be up and running within a day.
The Cost of a Break-In
A single break-in can cost your business thousands of dollars, and you may have to deal with going to court to help prosecute criminals caught breaking into or damaging your business. A thousand-dollar digital security camera system can prevent a costly break-in, and high quality, traceable camera footage can help identify suspects and ensure that justice is served.
Every Business is Vulnerable
Certainly some businesses are more vulnerable than others, but all businesses may be victims of vandalism, theft, or break-ins. Unfortunately some criminals want to cause havoc without regard to what type of establishment they damage. Video camera security systems are better than the systems of yesterday, and they are more cost-effective than ever. There has never been a better time to protect your business with a surveillance camera system.
Security camera systems for business should be tailored to meet the most prevalent risk. For example, in some areas vandalism is the most prevalent crime, while in other areas, theft may be a problem. If you’ve had incidents in the past, take your cues from them. You may want to talk to local law enforcement and ask which crimes are most prevalent in your business’s neighborhood.
Evaluate Entrances to your Business
Doors, windows, and even air vents are all points of vulnerability in your business. Make sure you are able to position surveillance video cameras to monitor these places. Once you count up all your business’s doors and other possible points of entry, you can make a determination of how many cameras will be required to provide the level of security you need.
Understand the Lighting Conditions
Well-lit areas are less likely to be targeted by criminals. If there are places on your business property where better lighting cannot be installed, you’ll want to look at surveillance video cameras that have superior capability in low lighting situations. Some cameras offer infrared “night vision” capabilities, which can record clear images even in very dim areas.
Protect the Interior of the Business
While keeping criminals out is a big part of your business security system, you don’t want to leave the interior vulnerable in case someone does breach the outer perimeter of security. Placing cameras in areas where valuable equipment or materials are kept is important. Cameras today can even be well-hidden in illuminated Exit signs and false sprinkler system heads.
Make it Known a System is in Place
A sign stating that your business has security systems in place can further deter criminals, as can placing some cameras where they are easily visible. Add a robust lock system for doors and windows, and you will deter many criminals, who will move on in search of easier targets. Security systems for businesses can be uniquely designed to meet any need, and the cost of these systems is becoming more reasonable as the camera, recording, and storage technologies mature.
Professionals who install security systems for business applications will tell you that the simple presence and operation of security cameras are not enough to protect a business. Too many businesses put up cameras and think that’s all there is to it. For a surveillance camera system to fulfill its potential, the system must feature
• Sufficient video storage capacity
• High image quality
• Correct camera placement
• Accurate date and time synchronization
Sufficient Video Storage Capacity
Your camera system could witness a crime with good enough clarity to identify the perpetrator, but if it cannot store the images due to insufficient video storage capacity, you could be out of luck. Today’s DVR systems have more storage capacity than ever, and some cameras are designed to only record when motion is detected. Ensure your system has sufficient storage capacity to capture the images that protect your business.
High Image Quality
We’ve all seen grainy surveillance video and wondered how anyone could be identified from the footage. Newer cameras record in black and white or color, and some have infrared “night vision” recording, which captures high quality images even in low light conditions. Today you don’t have to spend a lot of money to get high resolution cameras that record high quality images.
Correct Camera Placement
Cameras should be placed so that the entire area captured is space where security incidents could occur. If half a camera’s field of view is taken up by a brick wall, the camera is only giving you half the information you need. Make sure all cameras capture areas of interest. Some overlap is fine, and can be valuable should one camera stop working or be destroyed by a criminal.
Accurate Date and Time Synchronization
For law enforcement to effectively use footage from security systems for business applications, the images must be traceable and accurately coded with date and time information. Video images can be useless if the date and time encoded with the footage are incorrect or missing. Getting the most from your surveillance system isn’t difficult. Make sure your security camera system works as hard as you do.
Just about every business today uses cameras for loss prevention and to monitor employees, and the effective use of these systems can result in tremendous savings for your company. It will also allow you to know if certain employees are not working effectively and efficiently, and allow you to reward those who are making good use of their time.
But if you don’t know how to best use business security camera systems, your efforts won’t be successful. Here are some tips about how to get the most from your camera system.
Monitoring Employees
Many fail to monitor their employees when they use security cameras for business. They may assume that all the loss they incur comes from the theft and vandalism of outsiders, but employee theft is a sad reality. Another form of loss happens when an employee uses company time for personal pursuits or just plain working ineffectively. Oftentimes, this can result in huge losses in terms of salary paid. But when you monitor employees, you are likely to see less of these time wasting habits and will be able to spot employee theft, vandalism or other practices that need to be addressed.
Reviewing Tapes and Recordings
You may have an employee who physically monitors your business security camera systems as you record the activity on your property, but it’s also good to review these recordings regularly yourself so you can pick up on activity that they might miss. For instance, you might find that some employees are habitually late or leave early, or may realize that property is being taken from your warehouse as your security staff overlooks it.
Of course security cameras for business can’t make decisions for you when it comes to the way you use them. Talk to your sales representative to formulate a plan that will allow you stop theft and employee misconduct in its tracks. After all, you work hard for you money, and a good security camera will ensure that those hard earned dollars stay where they should—in your pockets.
Just owning DVR NVR security systems will do no good for your business unless you know how to use them effectively. In addition, you’ll have to know exactly where to install the cameras to get the best view, and how to maintain the recordings. You should also make it known that you’re using a security system in order to deter any malfeasance. Here’s an overview of these tips.
Know Your Property’s Weak Spots
For many retail businesses, weak spots include those places that are out of the sight of cashiers and other personnel. Clothing racks in the back of the store or aisles that are far from the front are the most vulnerable for theft. For businesses like warehouses or manufacturing facilities, the weak spots could include entrance and exit points where thieves may quickly load up materials or sneak into your property. Be sure you have the cameras from your DVR NVR security systems aimed in the right spots so you get the most protection for your property. Outbuildings such as storage sheds, back entrances, and of course areas where money is being exchanged should all be monitored accordingly.
Advertise Your Systems
One of the best ways to prevent loss on your property is to let potential thieves and vandals know that you have hybrid DVR surveillance systems in place on the property and that they are being monitored. You may see this types of signs yourself when you frequent other businesses, and they’re in place for a reason.
You don’t need to tell customers and your staff where you have cameras trained or why, but letting them know that their activity is being monitored can help keep the business safe for everyone. Those businesses that have installed hybrid DVR surveillance systems are less desirable places for thieves and vandals because crooks are more likely to move to steal from a business where no evidence can be collected. In fact, the signs alone can prevent loss and ensure your staff stays safe while working.
If you have questions about how to use a security system effectively, ask your sales representative for suggestions. They’ll be able to give you personalized recommendations for your company and show you how to put the equipment to the best use.
All businesses need security and loss prevention so as to curb costs and safeguard property. There are many ways you can add to the security of your business, including hiring security personnel and monitoring employees while on duty. Here are three ways that a surveillance camera system is the best choice for keeping your inventory, property, and your staff safe and secure.
Round the Clock Monitoring
It can be very expensive to pay a security guard to monitor your property, and nightshifts are typically the most expensive. But when you have a surveillance camera system in place you can use it twenty four hours per day without at a substantially lower cost. In addition, when you use a surveillance camera to monitor the premises, you’ll be able to review the tapes if the need to do so should arise.
Monitoring Your Entire Property
Another advantage to surveillance video cameras is that you can use them in any area of your property, as long as you don’t violate your staff’s or customer’s expected privacy. This means you will have more protection for outbuildings such as storage sheds or warehouse areas, and can more readily monitor entrances and exits where thefts are most likely to occur. Trying to manage a security staff and have them monitor your entire property can be cumbersome if not impossible.
The Recording of Data
Typically surveillance video cameras come with recording devices and features so that you can keep a record of what has happened on your property. That way if you do suffer a theft or vandalism, you’ll have a record that you’ll be able to use to help identify the right person. Hopefully, this important information will allow you to recover your losses. This can be difficult to do without a surveillance camera system in place, especially if you don’t discover a loss or crime until well after the incident.
You have many options for security for your business, but you need to consider what gives you the most protection at the most affordable price. Camera systems are in place in most businesses for a reason, making them a good option for your business as well.
