<JacobWeisz[m]>
Yeah, if someone gets into your on-premise camera system, good chance they can get into a lot of other sensitive stuff too, you're already hosed.
<simpson>
Important food for thought for those of us designing cap-safe homelabs.
<simpson>
Be like the video-game designs: Access to your security cameras is not a winning condition, just another capability. (But don't actually encourage hackers with Mario-style lessons or Zelda-style rewards~)
<kentonv>
oh hey you guys were talking about the camera thing
<kentonv>
JacobWeisz[m], they got a root shell on a security camera. That's it. We don't grant our security cameras access to prod.
<kentonv>
(but obviously I do agree that cameras probably shouldn't be IoT...)
<kentonv>
also the facial recognition thing was apparently just false. We do not use facial recognition. I was actually kind of disappointed by that. I think private office security cameras are a great use case for facial recognition -- to identify people who shouldn't be there and flag them to security. People walk right in to tech company offices all the time, "tailgate" someone with a badge, and then swipe a laptop.
<JacobWeisz[m]>
I figured only internal IT folks would know how much risk that poses in a given environment. I would hope/assume Cloudflare segments its network reasonably.
<JacobWeisz[m]>
And yeah, I don't think entry/exit to secure buildings is a place where you scream privacy violation. Everyone knows they're being logged when they swipe a badge in.
<kentonv>
Well, I think these cameras are not just at the entry/exit. I mean, I don't personally know details of the system but I've seen cameras in all the work areas.
<JacobWeisz[m]>
I think people can imagine horror stories about micromanagers and clocking bathroom visits, but I can't imagine Cloudflare being that sort of work environment.
<kentonv>
but the whole point is definitely to track intruders, not employees
<kentonv>
heh, yeah, certainly not
griff_ has joined #sandstorm
<JacobWeisz[m]>
This is a good advertisement for your capability security model stuff nonetheless. :D
<kentonv>
it's also a good advertisement for..... Cloudflare's Zero Trust security products. :)
<kentonv>
("Zero Trust" is some sort of marketing term that apparently means "you don't get anything just by being on the corp network, you have to authenticate to services")
<JacobWeisz[m]>
True. Anything adequately assuming your internal network is untrustworthy should handle a stray camera being accessible relatively handily.
<JacobWeisz[m]>
The potential scary condition would be if the camera platform had any credentials stored for any sort of integrations. Since we can assume the attacker could probably access any data stored with that platform via the admin account.
<JacobWeisz[m]>
At least in the Windows world, most things which integrate with AD have at least a user account with minimal credentials, occasionally you find some that needs much higher permissions. Sometimes it's Microsoft Exchange. :o
<JacobWeisz[m]>
(My on-prem is always better narrative might've taken a small beating this past week...)