christopherburg.comA Geek With Guns – Chronicling the depravities of the State.

A Geek With Guns Chronicling the depravities of the State. Don’t Use Wi-Fi for Security Cameras I’ve been asked for my opinion on Wi-Fi security cameras many times. My opinion is to avoid them. Wi-Fi is susceptible for many easy to perform attacks. For example, Wi-Fi deauthentication attacks are a favorite of script kiddies because they are so easy to perform. I’ve demonstrated how easy it is to many friends. WPA3 helps alleviate this, but most access points that I’ve seen are still using WPA2. If you buy a Wi-Fi camera that can’t use WPA3, it is vulnerable to this trivial attack. Deauthentication attacks aren’t the only way to bring a Wi-Fi network down. Wi-Fi is a wireless protocol, which means it’s susceptible to jamming. When I explain this to friends, they often say that I’m being overly paranoid. But just because you’re paranoid doesn’t mean that they’re not out to get you : A serial burglar in Edina, Minnesota is suspected of using a Wi-Fi jammer to knock out connected security cameras before stealing and making off with the victim’s prized possessions. Minnesota doesn’t generally have a reputation as a hotbed for technology, so readers shouldn’t be surprised to hear that reports of Wi-Fi jammers used to assist burglaries in the U.S. go back several years. PSA: even criminals use technology , and more are now catching on — so homeowners should think about mitigations. This is the exact thing I’ve been warning about since Wi-Fi cameras came on the market. The purpose of a security camera is in the name: security. You want security cameras to be a deterrence and, failing that, to collect evidence that can be provided to law enforcers, insurance companies, etc. A Wi-Fi camera isn’t going to deter a burglar who has access to jamming hardware and knows how to use it. Wi-Fi cameras that have been disconnected from their recording device aren’t going to collect evidence (a camera with a built-in SD card could, but then you’re trusting an SD card, which is a crap shoot). If you’re going through the trouble of buying and installing security cameras, get hard wired cameras. There are a lot of excellent Power over Ethernet (PoE) options on the market. PoE cameras only require a single Ethernet cable to provide both power and data connectivity. Author Christopher Burg Posted on February 13, 2024 Categories Protecting Yourself and Others Tags Security , Technology 1 Comment on Don’t Use Wi-Fi for Security Cameras In Praise of Pen and Paper Back before the Internet became ubiquitous, one of the most commonly given pieces of computer security advice was to not write passwords down on Post-It notes and stick them to your computer. The threat model was obvious. Anyone sitting down at the computer would have access to the password. This threat model was the most common one back then. While writing passwords down on Post-It notes isn’t a good idea today, it’s actually quite secure against today’s most common threats because a piece of paper can’t be accessed remotely. Ubiquitous Internet connectivity has shifted the most common threat models from local access to remote access. Data breaches, ransomware, and distributed denial of service are three of the most common forms of attack we read about today. Data breaches in business and government networks have resulted to tremendous amounts of personal information being leaked online. Ransomware attacks can grind businesses to a halt by locking away the data needed to complete day to day tasks. Likewise, distributed denial of service attacks can bring businesses to a halt because so much data has been uploaded to other people’s computers. If those computers are knocked offline, the data uploaded to them becomes inaccessible. A folder containing information written on paper forms stored in a filing cabinet can’t be stolen remotely. It can’t be maliciously encrypted remotely. Access to it can’t be taken away remotely. The benefits of paper don’t stop there. Paper has an intuitive interface. You pick it up and you read it. Accessing information on a piece of paper doesn’t require trying to figure out a command line or graphical user interface designed by a mad programmer who seemed to take design cues from Daedalus. The user interface of paper also doesn’t change. You don’t have to worry about a software company releasing an update to a piece of paper that drastically changes the user interface for no reason other than the sake of changing it. Paper is resilient. Data stored on a computer can be corrupted in so many ways. A file loaded into RAM can be corrupted due to a memory error and that corrupted data can be dutifully written to disk and then included in backups. It’s possible that a file that is accessed infrequently can be corrupted without anyone noticing until all of the backups of the uncorrected file are cycled out. A file can also be corrupted while it’s stored on a hard drive or SSD. Paper doesn’t suffer such weaknesses. Writing information down on paper has a lot of security and integrity benefits. None of this is to say there aren’t downsides to using paper. But the next time you read about patient information being leaked online because a hospital suffered a data breach, consider how much safer that information would have been if it had been stored on paper forms instead of a database. When half of the Internet disappears due to another Cloudflare misconfiguration and you are unable to perform a task because the information you need is hosted on somebody else’s computer, consider that you’d still be able to complete the task if the information was on a paper form in your filing cabinet. Just because a technology is old doesn’t mean it’s completely outdated. Author Christopher Burg Posted on November 16, 2023 Categories Protecting Yourself and Others Tags Security , Technology No True Gray Man Through some twist of cosmic karma, there seems to be a universal rule dictating that any group of carry permit holders must discuss the concept of the gray man. Through an addendum to the universal rule, this discussion must always devolved into No True Gray Man where each participant points out why every other participant is failing to be a gray man. The concept of the gray man seems simple enough. If you don’t want unwanted attention, you need to blend in with the general populace. This is important to many carry permit holders because they know that if a bad guy is able to mark them as a carry permit holder, then they will be the first target should that bad guy decide to act like a bad guy. Such a grizzly fate can only be avoided by becoming indistinguishable from the background mass of people, to become a gray man. The question is, how does one achieve the coveted status of gray man? As a frequent (and almost always unwilling) participant in this conversation, I have learned the characteristics of the gray man. The gray man does not wear tactical pants. The only people who wear tactical pants are people who are carrying a gun. No exceptions. The gray man does not wear a tactical shirt. What is a tactical shirt? Any button down shirt that has pockets. Unless it’s not. The gray man does not wear camouflage. The gray man does not wear any clothing with an emblem of any firearm manufacturer. The gray man does not wear hiking boots unless they’re in gaudy colors. The gray man does not use a backpack with MOLLE webbing. The gray man does not use any pack other than a fanny pack because all other packs scream that the owner is carrying a gun. The gray man does not walk too fast. People who walk too fast attract attention and are easily identified as a man with a gun. The gray man does not walk too slow. People who walk too slow are obviously trying to avoid attention and are therefore easily identified as a man with a gun. If you do all of these things, you will blend in perfectly with the masses and by extent achieve the coveted status of gray man! Unless, of course, you actually practice all of the other things...