Wednesday, 24 December 2008

New Security Technology: projecting a silent microwave scream inside your head

The US military has bankrolled early development of a non-lethal microwave weapon that can cause sound inside the target's head. The Mob Excess Deterrent Using Silent Audio ("MEDUSA") is based on a well-known phenomenon, but the link to potential military use has only recently been made. When active, the MEDUSA's microwave beam causes shockwaves inside its targets' skulls which can be detected by the ears. A series of microwave pulses can also be created to produce recognisable sounds. The MEDUSA's advantage lies in that the generated sound originates from within the skull, and cannot be blocked out by conventional means such as earplugs. Depending on the intensity of the beam, the effect can range from annoyance to incapacitation. Conversely, personnel situated outside the MEDUSA's beam will be completely unaffected. In addition to potential applications on the battlefield and in crowd control, the technology behind the MEDUSA may also be of assistance to people with outer ear problems that impair their normal hearing.

MEDUSA involves a microwave auditory effect "loud" enough to cause discomfort or even incapacitation. Sadovnik says that normal audio safety limits do not apply since the sound does not enter through the eardrums.

"The repel effect is a combination of loudness and the irritation factor," he says. "You can't block it out."

Sadovnik says the device will work thanks to a new reconfigurable antenna developed by colleague Vladimir Manasson. It steers the beam electronically, making it possible to flip from a broad to a narrow beam, or aim at multiple targets simultaneously.

Sadovnik says the technology could have non-military applications. Birds seem to be highly sensitive to microwave audio, he says, so it might be used to scare away unwanted flocks.

Sadovnik has also experimented with transmitting microwave audio to people with outer ear problems that impair their normal hearing.

Wednesday, 10 December 2008

Back on to Viewing Network CCTV Systems...(Legally or illegally).

Have you ever wanted to see what was going on in a bakery on the other side of the world? How about seeing into top secret labs? Or maybe even a police car's dash camera. With the following information you can not only see through the eyes of "Big Brother", but you can zoom, pan, tilt, capture & save images, and even reset the directions the security cameras face!

Steps

  1. Open up your web browser. Browsers that support tabbing (such as Firefox, and newer versions of Internet Explorer) are better, because you can have quick access to many open webpages, instead of having to always open a new instance of the web browser.
  2. Using the browser, go to a search engine of your choice, and input any of the following search queries:
  3. inurl:"CgiStart?page="
  4. inurl:/view.shtml
  5. intitle:”Live View / - AXIS
  6. inurl:view/view.shtml
  7. inurl:ViewerFrame?Mode=
  8. inurl:ViewerFrame?Mode=Refresh
  9. inurl:axis-cgi/jpg
  10. inurl:axis-cgi/mjpg (motion-JPEG) (disconnected)
  11. inurl:view/indexFrame.shtml
  12. inurl:view/index.shtml
  13. inurl:view/view.shtml
  14. liveapplet
  15. intitle:”live view” intitle:axis
  16. intitle:liveapplet
  17. allintitle:”Network Camera NetworkCamera” (disconnected)
  18. intitle:axis intitle:”video server”
  19. intitle:liveapplet inurl:LvAppl
  20. intitle:”EvoCam” inurl:”webcam.html”
  21. intitle:”Live NetSnap Cam-Server feed”
  22. intitle:”Live View / - AXIS”
  23. intitle:”Live View / - AXIS 206M”
  24. intitle:”Live View / - AXIS 206W”
  25. intitle:”Live View / - AXIS 210″
  26. inurl:indexFrame.shtml Axis
  27. inurl:”MultiCameraFrame?Mode=Motion” (disconnected)
  28. intitle:start inurl:cgistart
  29. intitle:”WJ-NT104 Main Page”
  30. intitle:snc-z20 inurl:home/
  31. intitle:snc-cs3 inurl:home/
  32. intitle:snc-rz30 inurl:home/
  33. intitle:”sony network camera snc-p1″
  34. intitle:”sony network camera snc-m1″
  35. site:.viewnetcam.com -www.viewnetcam.com
  36. intitle:”Toshiba Network Camera” user login
  37. intitle:”netcam live image” (disconnected)
  38. intitle:”i-Catcher Console - Web Monitor”
  39. After you Google one of these queries, you will see some search results, click on any one of them.
  40. Then you will either see a whole bunch of images of a security camera ,or the screen of a single camera.
  41. Depending on the type of camera that you have access too, you may be able to zoom, pan, and tilt the camera to see what you want to.
  42. If you want, you can use a screen capture program to take images and store them to your computer (or you can do this by pressing 'print screen' ('print sc') and opening 'Paint', then pasting it (ctrl+v), cropping the image (highlight the section that you want to delete, using the tool on the side and press' delete' or ctrl+x) and saving the image), or using a screen recording program do record the video stream. Some camera control panels will have image exporting options built in.
  43. After you get tired of one camera go back and try another, there are thousands.
  44. Have fun

Tips

  • If you wanted to look through a certain camera you need to find the link for that camera and it needs to be a CCTV(Closed Circit Television) camera. CCTV cameras are cameras that are connected to the web and can be veiwed by goin to the link on the inside of the packaging when the camera is purchased. If you are not sure of the link of a camera other than your's there is really no way of veiwing it unless you have the Serial number were you can then contact the manufacter for the link. So, unless it is a well-Known camera (ex. Mnt. Rushmore) then it maybe difficult to veiw.
  • Only works on security cameras that are connected to the net.
  • If you cannot pan the camera, check the top of the control panel. If it displays "Locked" the motion controls for the camera have been disables by the devices administrator.
  • If any of the links do not work, don't delete them just add "disconnected" next to them, in parentheses, thank you!
  • Using anonymous proxies can help protect your ip address from monitoring.
  • The most interesting cameras are usually the ones that do not list a domain name, just an IP address
  • For more Camera links of different Kinds go to http://www.livewebcams.org.uk

Warnings

  • Even though this is not illegal do not try this with out using a browser you could get in some trouble with the individual owner of the camera.
  • Do not do this at school, most schools will have monitoring software in place so that they can see what you are doing. It is best to read your school's guidelines for computer use.
  • Do not repeatedly maintain long or continuous connections to the feedChange your IP Address (Windows), however, this may or may not protect you depending on both your network set-up and the tracking policies of your internet Service Provider. (30 minutes is a good limit). Access logs for the devices can be created, and may be monitored by administrators. Many administrators will disregard brief attempts to access low importance devices when no harmful use is found. However, long periods of monitoring will likely attract suspicion and may cause the accessing IP address to be reported to authorities. You can always
  • I have researched CCTV viewing and it is not illegal to view, it is only illegal if you break through an existing login system for the camera. In the UK however you will soon need a license to own a CCTV camera.

Tuesday, 2 December 2008

How Safe is Your Network CCTV Video?

Over the last few years we have seen many New products enter the Physical Security markets to bring convergence. In many cases the same manufacturers that made analogue systems are now either via acquisition or hire churning out product to connect to your existing network. OK, so we all understand the digital is the way to go. However, what many don't understand is that they are leaving their systems wide open to hackers and potential thieves.
In the last few weeks we have been working with a first rate company in the UK who showed us some really wild stuff. In many cases the manufacturers of these network attached devices don't take into consideration the actually network security features of their products. It's not intentional they just don't realize the capability of the hacker and the many tool that are freely available on the Internet to assist them in hacking IP cameras, DVR's, NVR's etc.
The security of hardware and embedded systems is often taken for granted. New technologies have exposed the previously closed hardware layers and directed attacks towards the embedded firmware that exists in physical network security devices. The company we met with provides a specialist service in two areas. They provide device testing and they can also as sit with code reviews. OK so what did I learn...
Two type so testing are available. Black Box Testing and Grey Box Testing.
Black Box Testing is Really about identifying in the vulnerabilities of the device that can be exploited in an operational environment.
Grey Box Testing includes the above plus testing with additional application information sources (such as source code and internal design documentation).

Now device testing can covers these areas.
  • Physical Attacks
  • Side Channel Attacks
  • Extraction and Reverse Engineering of Software
  • Device Modification through firmware and device update/boot loader functionality
  • Bypass or removal of device protection
  • Identification and exploitation of buffer overflows
  • Admin Interface Hacking
  • Data Extraction
  • Data Tampering
  • Protocol fuzzing
So did they scare us. No not really. What scared us was when we went to Google and typed in "Hacking of Network CCTV Systems" we ended up trawling site after site with instruction on how to log into restricted sites. One site even listed five cameras within the BBC but the link had obviously now been closed. We looked at an Airport in Canada, Several cameras in a City centre system in Scotland. The list is endless. If you are a manufacturer of anything in the physical security space that is going to get hooked up any network you really need to get your equipment checked out by a team of professionals. If anyone wants details of these guys please let me know. They impressed me not only with their capability but also with their understanding.
Drop me a mail or comment and I will send you the contact details directly. I don't want to post them here for obvious reasons.

Monday, 1 December 2008

I-Ball..... I am loving it......360 View Grenade Launched CCTV

Whilst reading Soldier magazine this month came by this very nice little device that may get you tech heads thinking...

A grenade-style wireless camera called the I-Ball is being designed by a Scotland-based firm to give troops a better view of what lies ahead of them.

Through the Ministry of Defence’s 2007 Competition of Ideas, the new technology developed by Dreampact could be a life-saving tool for soldiers.

The I-Ball is a portable, wireless, projectile camera that allows soldiers to view an area before they move in using real-time video with 360-degree view. It can be thrown into a room, or sent flying using a grenade launcher - offering images during flight and after it lands.

The I-Ball will be able to operate in temperatures below minus 32 degrees Celsius and over 44 degrees Celsius, making it versatile enough to be used on tanks or micro unmanned air vehicles (UAVs.)

“We have overcome some significant technological challenges in developing the I-Ball technology,” said Paul Thompson of Dreampact. “Although it is in its early stages, we are very excited about the technology's potential to help our troops to be better prepared for battle.”