fne8w2ahNov 6

Password to Louvre’s video surveillance system was 'Louvre', according to employee

https://lemmy.world/post/38398525

Password to Louvre’s video surveillance system was 'Louvre', according to employee - Lemmy.World

Lemmy

Show threadstoyNov 6

Ok this sounds bad, but I have a question…

Was the camera system accessible from the internet?

If not, this issue is far too overblown.

Show threadMikina

It depends on how well segmented is their network, but all you might need for that is a Raspbery PI with ethernet and GSM.

I’ve done some engagements where we sent someone into the company to get in as an air conditioning tech, and when they got in he planted that device between a printer and the network. It was set up to forward all traffic, but also allowed us to connect through GSM and get into the network.

It takes like a few seconds to plant it.

Or if it’s really bad, then you might be able to reach it from the WiFi.

Nov 6 at 11:19amWeb
Show threadkent_ehNov 6

Or if it’s really bad, then you might be able to reach it from the WiFi.

Or some employee might have dropped their own wifi access point onto the Lan for their own convenience.

I found 2 of those on the same floor during one sweep…