Web-based security cameras are designed to be easy to set up, access and use, according to Irish Farmers Journal IT expert James Tallon. However, they can leave their owners extremely exposed to security threats unless the default password is changed.

“If the default password is not changed, anyone with a link to the camera can access it and backwards engineer it to go as far as logging into your internet banking,” warned Tallon.

“It’s very easy to find a camera online. You can just run a Google search for the default web page for web-based cameras,” he explained. “Once you know the web address, you can Google the model number of the camera and get the default password.”

If the camera owner has not changed the password from the default one to a new password, anyone can get full access to camera.

“Someone with only a basic level of IT expertise can then access a frightening amount of information and gain control of the camera,” he pointed out.

Listen to a discussion of the issue in our podcast below:

Listen to "Could strangers be watching your calving cameras?" on Spreaker.

With access and control of the camera, it is possible to:

  • Zoom in on car or tractor registration plates, put this into Cartell.ie or MyWheels.ie and get a full service history, including address of the vehicle.
  • Search the IP address on Google Maps and find the location based within a number of miles.
  • Once the address is known, go to the house and connect to the wireless network or connect remotely.
  • Remotely install malware and remote monitoring tools to the farmer’s computer.
  • Monitor web browsing history, check photos saved on the computer, including tax forms, invoices, receipts or anything saved on the computer or laptop.
  • Use a KeyLogger programme to capture every keystroke the person types and find out what the owner’s user name and passwords are for everything from online banking to email, social media accounts and even login details for websites such as AgFood.ie
  • “All of this is completely preventable by just changing the default password on a device when you first turn it on,” points out Tallon. “And don’t use the same password you use for everything else, because if you get your email or Facebook hacked, then the hacker will now know your camera password, even though you changed it.”

    Read more

    Farmyards under threat from online CCTV systems