Where did you find that?
summary
Searches and screenshots show live industrial and consumer controls reachable from the public Internet: uses Shodan and takes 2.5 minutes to scan IPv4, finds thousands of exposed VNC desktops and roughly 3–4k internet-accessible fuel gauges, plus baby cams, pool chlorinators, a crematorium panel and a Finnish sawmill. GitHub and Google dorks reveal embedded credentials; a MongoDB ransom campaign wipes and replaces collections at scale (attackers netted about $22k from one actor). Demonstrations use automated scans and public indices — the discoveries are repeatable and exploitable.
AI-written summary · about
chapters (19)
- 0:00Start
- 0:56Why Is Security Hard
- 3:03What Is Iot
- 4:47Most Insane Thing I'Ve Ever Seen That Has Attracted Funding for Being an Iot Device
- 5:15What Is the Business Proposal for Us Mattress
- 10:06Pool Control System
- 10:29Fire Suppression System
- 12:13Sawmill Control Panel
- 21:00Baby Cams
- 25:45Default Password
- 28:27Hack Fuel Tanks
- 30:51Mongodb
- 34:52House Control Systems
- 35:21Music Control Panel
- 35:45Geothermal Control Panel
- 36:51Pharmacy Control Panel
- 41:18Why Does Donald Duck Wear a Towel When He Comes out of the Shower
- 45:52The Google Hacking Database
- 46:54Search Diggity
related talks
54mWhere did you find that?
26mInternet Scanning - Current State and Lessons Learned
26mHacking buildings: Security flaws in embedded building control systems
40mSecurity/Privacy in the IoT generation
40mInto the Mind of an IoT Hacker | How to Protect IoT Networks & Devices
19mThe Blind Spots of IT Experts on Security & What Companies Must Do Against It
38mHacking Demos, Dirty Secrets, Dangerous Lies, Asset Intelligence
39mHow to think like a hacker