Finding WEIRD Devices on the Public Internet
Source: YouTube · John Hammond · published Apr 22, 2024 · 27:50
This video demonstrates using Census, a search engine for the entire internet, to find publicly exposed devices and services 0:25-0:29. The narrator explores various exposed systems including unsecured cameras, billboards, and industrial control systems that are accessible to anyone.
Key Takeaways:
• Census allows searching for devices, computers, and open services across the internet, functioning like "Google for the entire internet" 0:45-0:52
• The video demonstrates accessing unsecured IP cameras and electronic billboards, showing live feeds and control interfaces 5:06-5:16
• Census GPT helps generate search queries without requiring knowledge of complex syntax 16:03-16:08
• The tool can identify potential security risks including exposed RDP services, malware infrastructure, and honeypots 18:00-18:04
The exploration reveals numerous security and privacy implications of devices being publicly exposed without proper authentication 26:12-26:14.
Sources:
- 0:25-0:29 Introduction to Census as an internet search tool
- 0:45-0:52 Explanation of Census capabilities
- 5:06-5:16 Accessing unsecured cameras and billboards
- 16:03-16:08 Using Census GPT for query generation
- 18:00-18:04 Finding security risks and honeypots
- 26:12-26:14 Summary of privacy implications
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Do we do the play sound or LEDs blink? No. Oh, that's ick. That's real ick. Whoa. What is this? Isn't that just like someone's house, though? Like that looks like a roof. Oh my goodness. The dude's just trying to wash his car. Why is this on the internet? Do they know that it's out on the internet? In this video, we're going to find weird stuff just publicly exposed out on the open internet. And the way that I'm going to be hunting for all this stuff is with Census. Now, let me be straight up. Census is the sponsor of this video, but we get to go off script and see what mischief we can get into and what cyber security shenanigans we might come across. So, I am online on search.sensus.io. And if you've never heard of census before, think of it as like Google but for the entire internet. Loo…