I can watch you on your built in webcam if you come to my website!!!

reply to post by madmangunradio


It is all OS's!

I am investigating whether there is a hack they use to deal with paper labels lol I think we are pretty safe with that though.

reply to post by davespanners


I won;t say it but welcome to the enlightened side!

I apparently haven't had enough to drink tonight. The only thing I agree with is don't piss the penguin's off.

reply to post by theregonnakillme


Well I can add that to the other 1000000 times I've been wrong before

Originally posted by davespanners
I'm going to do a HUGE U-Turn here and admit I was wrong wrong wrong with an extra helping of creamy wrongness on the side.

ClickJacking indeed

Link that proves how wrong I was

Why is there no "I was wrong" emoticon

Incredibly good find. I just posted that to facebook )

reply to post by davespanners


Honestly you could sit down and read a tutorial and be haxoring the interwebs in no time. Is it moral? No.
Stuff is not really that hard to do if you are computer literate to a certain degree.

Originally posted by davespanners
I'm going to do a HUGE U-Turn here and admit I was wrong wrong wrong with an extra helping of creamy wrongness on the side.
Link that proves how wrong I was

This isn't the same as inserting one line of code an getting complete access to a persons web cam. Not by a long shot.

What we are seeing in this example is a malicious action to purposely trick someone into allowing camera access through an embedded .swf file. You weren't wrong, "click jacking" is an entirely different exploit and has been around since flash first became available. This is more of a social hack than a technical hack. I'd have to see the line of code before I'd agree that this was possible.

..Ex

reply to post by Rhadamanthus


As I said I have a degree in Software Engineering, but I haven't used it since I left uni, strangely they didn't cover hacking during those 4 years and I have no interest at all in learning how to do it

Originally posted by theregonnakillme
reply to post by madmangunradio

 

It is all OS's!

I am investigating whether there is a hack they use to deal with paper labels lol I think we are pretty safe with that though.

WHAT! All OS's Links please..

i knew this, and can barely turn my computer on..lol have a built in mic as well, keep it turned of, as it doesn't work well, but that doesn't mean anything...
if they access my comp they won't see anything.. i keep a sock over it.. and have for quite a while... i also have an external mic that stays unplugged unless i'm using it, but even if they access my internal, they can't hear anything except music. i'm single... and don't spend too much time talking to myself.. well.. not a whole lotta time anyway..

reply to post by Nventual


You're right it doesn't work like that, all a person needs is your I.P. and a little time to get through your firewall then they can do whatever they want to with your peripherals... you will make it even easier if upnp is enabled on your machine.

And don't even get me started on what can be done with wireless cams, mics, and IP phones.

It's impossible to disable webcam lights, as long as they are not the LED night shot or face lights, I'm talking about the "webcam is on" light. That is tied right into the webcam and cannot be controlled.

Well they can't use mine. I have completely removed the software. Nobody can download software for it,as all downloads are on manual. AVG security and firefox are configured to ask before downloading.

I have noticed though that only desktops do not come with webcams,so its time to upgrade methinks.

you guys are all paranoid. Putting tape over your cam? LOL

Just go into device manager and disable your webcam with a right click. - No messy residue! hahahah

So your cell phone calls can all be easily tracked, recorded and the cell phone does not even need to be open or enabled, the mic is able to be activated, so are you all going to throw out your cell phones too?

If someone has a reason to spy on you, they will always find a way, if they have good reason.

Ok so let us presume that this is possible and somewhat easy to do ...

Why are there not a number of clandestine posting of secret web cam recording.

Any one that was able to do it why have they not posted what they captured on the Internet.

If it was easy there would be at least a few people caught nude and the people that could hack web cameras would have showed off there work. "its a look what i can do" ego thing. Hackers and scrip kiddies have to show off.

That is not saying it can not and has not been done. and if i was going to do it i would put the lines of code into useful freeware to spread it on the Internet. Great way to get it on Linux machines
This would bypass anti virus programs.
I do believe the government can do it.

Here is a link off of youtube that shows you what to download and shows you how to access other peoples webcams.

www.youtube.com...

its sickening to think how easily accessible this is, and knowing this cant be the only site, etc. for this..

Also..

There is also a court case of a school that gave its students free laptops and used the webcams to spy on the students while they were at home.

Stop using windows! U2U me about linux.

reply to post by madmangunradio


Yes, the click-jacking technique works on ALL OSs. No links needed.

Follow me here:

The click-jacking exploit makes use of HTML and Flash. Does your Chromium browser in Ubuntu support these?? YES, your Lin-Box can be suckered by web delivered exploits.

Linux is not "immune" to attacks just by virtue of being "Not-Windows". Linux is said to be more secure than other OSs, and there are many reasons why this may be true... however, when people say this, they are usually highlighting the security of it's Layer 2/3 NETWORKING stack (firewall). But the firewall can't protect you from exploits in Layer 5/6/7, etc. (Lookup the OSI Model if you aren't sure what these layers are) And it certainly can't protect you from yourself if you click something!!

Truth is, Linux/MAC are not as magically secure as people think they are. (Yes, I did just put Linux and MAC together. OSX and onwards is extremely Unix/Linux flavored under the hood... look it up.) Most of their defense comes just from being "different" as hackers tend to target the most widely used OS - Windows.

But now days, the World Wide Web (aka web browser internet) is becoming the most widely used "platform" and is even starting to resemble an OS of sorts. The internet is cross-platform and is the best thing to leverage if you are a e-terrorist. All OSs support the internet, have browsers, run Flash, JAVA, etc... so all you need to do is target these platforms.

I run Linux servers, many of them virtualized, and I am a big fan of the Linux world. Very stable, and much harder to attack. But they are by NO MEANS immune. If an exploit exists in a certain code platform, and your computer runs/supports the same platform, it can affect you. Period.

Originally posted by Rhadamanthus
reply to post by I.C. Weiner

 

>snip<
Most peoples computers (windows based) has remote assistance enabled by default.

You mean Remote Desktop, right? Most consumer Windows-based computers do not have RD enabled as those came with XP Home, Vista Home and Win7 Home; Remote Desktop / Terminal Services is only available on 2000, XP Pro, Vista Business, Enterprise and Ultimate (the former two not available via retail channels), and Win7 Pro, Enterprise and Ultimate and the server versions of those and is disabled by default unless the Windows install was an upgrade over a previous version which had it enabled or it's explicitly enabled.
I've come across a few installations of XP Pro and Vista Ultimate that even when the user enabled RD, that did not open the incoming port in the firewall so that had to be enabled manually. Additionally, if one is behind a router it is likely that the router has to have the appropriate port opened and I've heard of a few ISP's that intentionally block that port.

As for Remote Assistance, this requires the user on the (local) machine to be viewed remotely to send a request to a specific user via either (a) email or (b) initiate it via Windows Messenger (XP) or MSN / Live Messenger (XP,Vista,7). This cannot be started by a remote user; it must be started on the computer to be viewed. Even then, the local computer user must specifically grant permission to the remote user to do anything other than view the screen and send simple text messages to the screen of the local computer.

I don't know if a webcam being controlled remotely is something that most people should worry about but i believe It is possible if someone decides to do so.

When I bought a new computer with a built in webcam I put a sticker over it because I figured I might leave it on by accident and didn't know who might be able to watch my home if I did. It wasn't a subject that I gave deep thought to but I did it as a precaution.

I think a built in cam cover should be a standard acessory on all computers.