DDOS, botnets and Dahua cameras. What do we know? Let's find out.

[ronan]

Dahua and telnet vulnerabilities specifically mentioned in this news story.

http://arstechnica.com/security/2016/10/brace-yourselves-source-code-powering-potent-iot-ddoses-just-went-public/

Are firewalls and shutting off telnet access enough?

 

[nayr]

use vpn and dont let your IoT devices on the 'internet', pretend the upper case 'I' is a lower case 'l' just make them Lan of Things devices.. ideally there own lan where they can only talk to eachother.

even my opensprinkler system has to fetch weather updates through an authenticated proxy.

these botnets exist for one reason: port forwarding, and likely uPnP and DMZ are heavily implicated (aka, lazy/ignorant)

 

[ronan]

Oops, repost.

Good points