UMatthew Garrett, umthuthukisi we-Linux kernel owaziwa kakhulu owake wathola umklomelo kuFree Software Foundation ngeqhaza lakhe ekuthuthukisweni kwesoftware yamahhala, ezinkingeni zokuthembeka kwamakhamera e-CCTV axhunywe kunethiwekhi nge-Wi-Fi. Ngemva kokuhlaziya ukusebenza kwekhamera ye-Ring Video Doorbell 2 efakwe emzini wakhe, uMatthew wafinyelela esiphethweni sokuthi abahlaseli bangaphazamisa kalula ukusakazwa kwevidiyo ngokwenza ukuhlasela okwaziwayo kudala ekucinyweni ubuqiniso kwemishini engenantambo, evame ukusetshenziswa ku-WPA2 ukuze usethe kabusha uxhumano lweklayenti lapho kudingekile ukubamba ukulandelana kwamaphakethe lapho usungula uxhumano.
Amakhamera okuphepha angenantambo ngokuvamile awasebenzisi indinganiso ngokuzenzakalelayo ukubethela amaphakethe wesevisi kanye nokucubungula amaphakethe okulawula afika esuka endaweni yokufinyelela ngombhalo ocacile. Umhlaseli angasebenzisa i-spoofing ukuze akhiqize ukusakaza kwamaphakethe okulawula okungelona iqiniso aqala ukunqanyulwa kokuxhumeka kweklayenti ngendawo yokufinyelela. Ngokuvamile, amaphakethe anjalo asetshenziswa indawo yokufinyelela ukuze anqamule iklayenti uma kwenzeka lilayisha kakhulu noma lihluleka ukufakazela ubuqiniso, kodwa umhlaseli angawasebenzisa ukuze aphazamise ukuxhumeka kwenethiwekhi kwekhamera yokuqapha ividiyo.
Njengoba ikhamera isakaza ividiyo ukuze igcinwe kusitoreji samafu noma iseva yendawo, futhi iphinde ithumele izaziso ku-smartphone yomnikazi ngenethiwekhi, ukuhlasela kuvimbela ukulondolozwa kwevidiyo yomhlaseli kanye nokudluliselwa kwezaziso mayelana nomuntu ongagunyaziwe ongena endaweni. Ikheli le-MAC lekhamera linganqunywa ngokugada ithrafikhi kunethiwekhi engenantambo kusetshenziswa nokukhetha amadivayisi anezihlonzi ezaziwayo zomkhiqizi wekhamera. Ngemuva kwalokho, sebenzisa Ungahlela ukuthunyelwa ngokujikeleza kwamaphakethe okukhipha ubuqiniso. Ngalokhu kugeleza, uxhumo lwekhamera luzosethwa kabusha ngokushesha ngemva kokuthi ukuqinisekiswa okulandelayo sekuqediwe futhi ukuthumela idatha kusuka kukhamera kuzovinjwa. Ukuhlasela okufanayo kungasetshenziswa kuzo zonke izinhlobo zezinzwa ezinyakazayo nama-alamu axhunywe nge-Wi-Fi.
Source: opennet.ru