Help Net Security newsletters: Daily and weekly news, cybersecurity jobs, open source projects, breaking news – subscribe here!
●News
●Features
●CISO
●AI
●Videos
●Product showcase
●Industry news
●Reviews
●Whitepapers
●Events
●Newsletters
Please turn on your JavaScript for this page to function normally.
Help Net Security
Share
Digital cameras easily turned into spying devices, researchers prove
Users’ desire to share things online has influenced many markets, including the digital camera one.
Newer cameras increasingly sport built-in Wi-Fi capabilities or allow users to add SD cards to achieve them in order to be able to upload and share photos and videos as soon as they take them.
But, as proven by Daniel Mende and Pascal Turbing, security researchers with German-based IT consulting firm ERNW, these capabilities also have security flaws that can be easily exploited for turning these cameras into spying devices.
Mende and Turbing chose to compromise Canon’s EOS-1D X DSLR camera an exploit each of the four ways it can communicate with a network. Not only have they been able to hijack the information sent from the camera, but have also managed to gain complete control of it.
In this presentation from Shmoocon 2013, they explained in detail how they managed to mount the attacks, and have also offered advice for users on how to secure their cameras and connections against these and similar attacks.
Daniel Mende is a German security researcher specialized on network protocols and technologies. He’s well known for his Layer2 extensions of the SPIKE and Sulley fuzzing frameworks and has presented on protocol security at many occasions including Troopers, Blackhat, CCC, IT Underground and ShmooCon. Usually he releases a new tool when giving a talk.
Pascal Turbing is a network geek, auditor and penetration tester who loves to explore network devices, protocols, applications and to break flawed ones.
More about
●hardware
●surveillance
Share
Featured
news
●Open-source AI pentesting tools are getting uncomfortably good
●Ivanti provides temporary patches for actively exploited EPMM zero-day (CVE-2026-1281)
●Google disrupts proxy network used by 550+ threat groups
Download: Evaluating Password Monitoring Vendors
Resources
●
Download: Evaluating Password Monitoring Vendors
●
eBook: A quarter century of Active Directory
●
Download: Strengthening Identity Security whitepaper
Don't miss
●
Open-source AI pentesting tools are getting uncomfortably good
●
What boards need to hear about cyber risk, and what they don’t
●
Security work keeps expanding, even with AI in the mix
●
Ivanti provides temporary patches for actively exploited EPMM zero-day (CVE-2026-1281)
●
Google disrupts proxy network used by 550+ threat groups
© Copyright 1998-2026 by
Help Net Security
Read our privacy policy
|
About us
|
Advertise
Follow us