• June 15, 2024, 06:16:56 PM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: Remove camera name from authentication message  (Read 2607 times)

c0r3d3v

  • Level 1 Member
  • *
  • Posts: 5
Remove camera name from authentication message
« on: November 11, 2015, 11:14:26 PM »

Hello, one of the most important aspects of having a security camera is having it secure, for some reason the default authentication message is the camera model and name, that's the dumbest thing i've ever seen. You're literally giving an potential attacker half of the key right there letting him know what device he just reached. Also it would be incredible easy to write a script that scans entire networks and looks for these responses giving a full list of potential security cameras to hack. I know there's no such thing as "security by obscurity" but to not give the attacker the device name and model instantly when reached would probably filter out 99% of all attackers, the bests ones can probably figure this out in other ways.

How can i change the default authentication message to simply say nothing? Why do i want someone who finds my camera to know exactly what device they are dealing with? There's absolutely no point in giving this message except being a security risk.

« Last Edit: November 12, 2015, 12:06:11 AM by c0r3d3v »
Logged

c0r3d3v

  • Level 1 Member
  • *
  • Posts: 5
Re: Remove camera name from authentication message
« Reply #1 on: November 12, 2015, 12:05:51 AM »

The funnies continue, i try to setup email notification on motion detection, ftp worked fine by the way, GREAT WORK!!!.



As you can see "test error" doesn't really help me, so i go to the logs of the camera expecting a more detailed error message there.



Nothing.... great! With that i conclude.



« Last Edit: November 12, 2015, 08:38:43 AM by FurryNutz »
Logged

c0r3d3v

  • Level 1 Member
  • *
  • Posts: 5
Re: Remove camera name from authentication message
« Reply #2 on: November 12, 2015, 04:53:14 AM »

i realize now that i need to use port 587 for starttls, a simple error message giving me the gmail smtp servers error message would spare me the headache of trial and error until i figure it out, jesus christ dlink, help me help you, give us proper error messages, you really turned it around on yourselves, you give me to much information when i want to login to my device, i do not need to know that i'm logging into a DCS-5222LB, that is a security risk as anyone can find the ip and hit that address and now know what device they are accessing, but where i need information you simply give me "test error"

in an age like this companies like yourself stops existing unless they step up their game, dlink has the worst software and i have really no idea how you still can have so bad software and remain on the market.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Remove camera name from authentication message
« Reply #3 on: November 16, 2015, 07:28:53 AM »

I recommend that you phone contact your regional D-Link support office and ask for help and information regarding this. We find that phone contact has better immediate results over using email. Good Luck.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.