content: I "hacked" the Joint Institute for Nuclear Research in Russia I have made a few posts about Internet of Things security here before. To underline how bad the problem is, I took it a step further this time. My other posts targeted a small shop in Boston, a printer at a company in LA manufacturing stuff for NASA and a retina scanner at a college somewhere in the US (I forget where it was). Imagine my disbelief when I came across a listing on Shodan for a camera inside a nuclear research facility. If you want the tldr, it took me about 2 minutes to get the admin password for the web interface, hence the reason I used "hacked" in the title of this post. Here is the Shodan listing. The camera in question is a Trendnet camera. In one of my previous posts I accessed a D-Link camera, which are quite similar to the Trendnet ones because they reuse the same fucking code, meaning that some cameras have the exact same vulnerabilities even though they are produced by different companies. The admin password can be found by using any browser. Incidentally, the method used to find the password can also be used to link the same post multiple times on Voat without receiving an error about already posting it. Here is the url I typed in: Basically, there is one file stored on the camera that is accessible to unauthorised users - rtpd.cgi. The question mark after the filename is a sort of break point. If you make a Voat link post and put a "?" at the end, followed by anything you like, it will post the url because it ignores everything after the question mark. But, because the url is technically different to the normal one, it recognises it as a new link, allowing you to post the same link an infinite amount of times as long as you change what you put after the question mark. In the case of the camera though, everything after the question mark is passed straight to system and is executed as a command, meaning you can run unauthorised commands just by entering a url. I am telling the camera to give me the admin password. And it fucking works. If my suspicion is correct, this password is a hardcoded password too, so there is no way to fix it even if you update the firmware, because it is unpatchable. They did not upgrade their firmware though, it is version 1.0.0 (I checked). This lump of shit has been sat in JINR since 2008 and they haven't even bothered to update the firmware in nine years.