Easy Video Conferencing

Tens of thousands of video conferencing setups, including some in corporate meeting rooms where the most confidential information is discussed, are vulnerable to spying attacks, researchers said this week.

After spending months rooting around top-end video conferencing hardware and software, and taking tours through meeting rooms himself, HD Moore said the danger was a "perfect storm" brought on by lazy habits and sloppy security settings.

"Many of these [video conferencing installations] are naked on the Internet, " said Moore, the chief security officer at Rapid7.

Using scanning tools, Moore surveyed a small fraction of the Internet to find hardware that used the H.323 protocol - the most widely-used by video conferencing equipment - and discovered that 2% were at risk of hacker infiltration because they were set to automatically answer any incoming calls and were not protected by a firewall.

On the Internet as a whole, Moore estimated that more than 150, 000 video conferencing setups were vulnerable to eavesdropping using the hardware's microphone and spying via the remote-controlled camera.

The biggest gaffes in video conferencing are the auto-answer feature and the positioning of the hardware sans a firewall, or outside the organization's usual defensive perimeter, said Moore. And even when they seem to be protected, some firewalls fail to properly handle the H.323 protocol, and in fact expose the hardware to infiltration.

Other issues range from known vulnerabilities in some video conferencing software to used hardware sold via outlets like eBay that have not been scrubbed of their pre-set connections to other conferencing locations.

Moore was able to access video conferences held in corporate boardrooms, and at meetings in research facilities, law offices, and venture capital firms.

"You see these very nicely-appointed conference rooms where they're having their most important conversations, " said Mike Tuchen, chief executive of Rapid7 in the same interview. "Often, where video conferencing equipment gets located are the same places where the most sensitive meetings take place."

Disabling auto-answer is the easiest way to block this spying, said Tuchen.

"Most of Polycom's equipment defaults to auto-answer, but disabling that is pretty straight-forward, " Tuchen said, citing the video conferencing maker that Moore found with the most systems set to automatic answer.

In one case, Moore was able to dial into an ongoing conference, then operate the camera - zooming in on one individual to see him enter a password on his laptop - for more than 20 minutes, all without the participants noticing the moving camera.

Exposing video conferencing hardware on the Web was the other major gaffe that Moore exploited. "Too many people take a shortcut by putting their equipment on the Internet, " said Tuchen.

Moore is an accomplished vulnerability researcher and hacker - he is also the creator of the popular open-source Metasploit penetration testing toolkit - but he said others could duplicate his work if they had "some moderate level of technical sophistication."

Some in the video conference industry have taken exception to Moore's conclusions that spying is easy.

anastasia beverly hills self-made eyeshadow palette self-made man (book) self-made synonym self made female billionaires self made mansions host self made t shirt self made men anastasia beverly hills self made self-made men when was the first self driving car made self made creative dual tip markers self made billionaire women self made tattoo colorado springs self made videos self-made real estate billionaires self-made man definition fivio foreign self made lyrics self made millionaires under 25 self made millionaires list self made man quotes people who are made self-aware by acting in front of a mirror or tv camera have been found to self made business self made wallpaper self made tattoo meaning self made mansions cancelled self made man drawing miguel aguilar self made self made man definition biscuits made with self rising flour and lard e-40 charlie hustle: the blueprint of a self-made millionaire self made training facility winter park self made tattoo fonts first self made female millionaire cursive self made tattoo nikki s. lee made a self-portrait that suggests that identity is always clear-cut. self made tattoo company self made millionaires larkin poe self made man are most millionaires self made self made tattoo designs self made performance biscuits made with self-rising flour and lard pancakes made with self rising flour forbes richest self made women mmg self made self made shirts self made man norah vincent self made man frederick douglass what is a self made man self made vol 2 a self made hero self made tattoos designs self balancing scooters made in usa j.stalin self made millionaire letters from a self made merchant to his son self made halloween costume self made hand sanitizer mike dillard self made man what does self made mean banana bread made with self rising flour bread made with self rising flour how to be a self made millionaire self made statue norah vincent self made man self made billionaire effect self made creative acrylic paint self made font self made man society self made bryson tiller anastasia beverly hills self made eyeshadow palette self made man book home made self watering planters self made millionaires under 30 self made man myth self made tbt self made self paid self made mann co key j stalin self made millionaire frederick douglass self made man cake made with self rising flour marc quinn's self, a self-portrait made from frozen blood, is created in ________ scale. self made hats self made hat self made sweatshirt self made myth self made training facility chino hills self made real estate billionaires self made jean jacket self made company self made in spanish self made soundtrack self made millionaires stories self made pendant inherited wealth vs self made self made vol 3 self made in cursive dumplings made with self rising flour self made billionaire list selfmade object self-made netflix cakes made with self rising flour self made jacket synonym for self made a self made man forbes america's richest self made woman text-to-self connections are made when the reader connects something in the text to __________. self made tapes miguel aguilar self made net worth self made skincare lettering self made tattoo fonts self made t shirts selfmade object self made tattoo on arm cookies made with self rising flour self made stickers what is a self made millionaire kylie jenner not self made 21 success secrets of self-made millionaires hand self made tattoo self made training self made in chinese self made man statue tattoo self made chino hills self made halloween costumes self made saints row the authentic self is the soul made visible john jacob astor, who seemed to exemplify the “self-made man”: self made tattoos self made man quote mmg self made 4 self made mmg the self made billionaire effect pdf self made song self made 3 tracklist self made farms what is self rising flour made of self made sticker self made training facility rancho cucamonga self-made millionaire woman self-made princess book i am self made forbes youngest self-made billionaire self made boutique biscuits made with oil and self rising flour define self made man self-made millionaire definition bill bellamy self made there is no such thing as a self made man montgomery gentry self made man biscuits made with oil and self-rising flour self made savage shirt self made pictures self-made millionaire books trump self made kylie jenner self-made billionaire, forbes self made training facility cost self made images self-made will self made training facility las vegas self made gym scottsdale what is a self-healing cutting mat made of self made nely galan self made skin care mmg self made 3 self made man documentary kylie jenner self made billionaire forbes self-made man statue tattoo self made man montgomery gentry self made millionaire lyrics what are self-healing cutting mats made of self made family self-made billionaire