• 3 Posts
  • 3.36K Comments
Joined 2 years ago
cake
Cake day: July 15th, 2023

help-circle






  • that’s just it… any vulnerable system lets them get their nose in the door, then the camel starts snooping around the tent for whatever it can get. Eventually, they find away to something juicy.

    The thing is, whether we’re talking about digital or physical security, the weakest thing in any system is the humans. The sloppy passwords (c’mon it should have been Louvre25! lol.) is a human thing. clicking that phising scam is a human thing. kipping off to the egyption bedroom for tryste with receptionist is a human thing.

    the simple password isn’t the problem. The people being complacent is.





  • Usually, there’s a network for IP cameras, with a central server holding the video. There’s then, usually, a firewall to anything outside that, and frequently just a hardline to a monitoring system. (another computer with lots of monitors, typically.)

    Most modern systems can VPN to the firewall and run a client there via remote desktop, and then access the monitoring system that way; but the server itself is not.

    As to the complexity of the password, typically there’s different levels of permissions. The basic ones would just let you monitor real time, probably review recordings, and maybe rip those recordings. (but not change settings, or otherwise delete anything.) A place like the Lourve would have multiple guard stations connecting in on the local network; with dozens of guards watching cameras at any given time; and would each need their own account/logins if you wanted to make the password actually complex.

    a large part of the problem is just the sheer amount of people that would need to have acounts- the lourve says they have ~1300 ‘reception and security’ staff. (for the record, reception would also be part of the security envelope… though they probably wouldn’t need the password.)

    anyone dialing in from off sight would likely have their own password (and have elevated permissions to allow that.). Frequently, by remote desktoping into a system on the local network.

    You’ll also notice theyre not saying the security system was actually compromised- even if the cameras were pointed the right way, they’d still have gotten in and out because the windows were a point of vulnerability. They might have been able to respond faster, but they were in and out in ten minutes. a camera wouldn’t be able to stop that, if you account for normal human reaction times… if they’d even notice the ‘contractors’.









  • Being called out for a hypocrisy is not hate.

    You were literally telling me not to tell be how to drive (which, while I came close, I didn’t actually do,) while literally telling me how to drive.

    I understand many states have some form of “slower traffic laws”… and explained why that’s not relevant.

    There are many reasons why someone needs to be in the left lane- taking a left-exit, or the left hand fork in a split, or, you know, actually passing people themselves…. Or seeing an eratic driver behind them making it dangerous to get over.

    I have to assume that CA law also says something about running people off the road because they’re not going fast enough for you. Generally, I assume everywhere does- for obvious reasons.

    Even if you’re right, that doesn’t give you them right to drive recklessly and tailgate people. Which brings me back to the original point I was making: the kind of people who are angry at having to slow down… are unlikely to be polite and civil- they’re already demonstrating harassing behaviors.