THG 3000 Lite / Lack of VPN?

[Br04dB4ndAl]

Hi,

I just received my new THG 3000 Router  following an upgrade but notriced on the order paperwork it's designated "Lite".

Does this mean there are versions and I've received the cheaper one?

Also, why is it run by Vodafone Firmware? I understaood this was supposed to be a highly capable top of the line Router yet it doesn't even have a built in VPN  - essential for security cameras to avoid being hacked ( the alternative is to port forward which = free hacking for everyone on your network and botted cameras).

Given the prevalence of CCTV cameras these days in people's home, you'd have though that Vodafone would have included a VPN facility in their router (I'm gueessing the aprent router it's based on has one), unless of course there is a non "Lite" version and I got the crappy one.

[gipjon]

So why is it a bad thing if some one can view your cameras.  

Its seam to me more like you have shares in a vpn company and your trying to promote vpn 

VPN router lol buffering all the way 

[Cynric]

.@Br04dB4ndAl

Oops, you said "...  you don't understand ...".

I am sorry, but I am not prepared to help you any further.

[Br04dB4ndAl]

---

@Cynric wrote:

.@Br04dB4ndAl

Oops, you said "...  you don't understand ...".

I am sorry, but I am not prepared to help you any further.

---

Sorry you feel that way and you can't take any critisism even if constructive.

If at the end of the day you believe Port Forwarding is safe, then you clearly don't understand the implications. As said above, please review the video from the BlackHat conference as I believe it will be revealing as to just how dangerous not using a VPN for remote access is.

At any one time there are millions of CCTV cameras that are hacked and either acting as bots, spying on owners with footage uploaded to porn or other undesireable sites or bricked. I come as a user from a CCTV forum where members have had cameras hacked and bricked as a result of port forwarding and where many professional installers also give advice, and the advice is always the same, never port forward, always VPN.

It's difficult to stress the importance, hence the frustration that with the UK having over 5 million cctv cameras alone, with 96% of them being in homes, that ISP's are still ahnding out routers without VPN capability.

As said, sorry you find offence where non was intended.

[gipjon]

millions of CCTV cameras that are hacked and either acting as bots, spying on owners with footage uploaded to porn sites 

Wow im going to have to watch my camera a lot more i really did not know people was having sx outside of my house . I missed all that 

Was going to say does anyone want the password but the 6 cameras are open to every one  really dont see the point why you need to have them secured. First thing you do is upload the video to facebook 

[Br04dB4ndAl]

---

@gipjon wrote:

millions of CCTV cameras that are hacked and either acting as bots, spying on owners with footage uploaded to porn sites 

Wow im going to have to watch my camera a lot more i really did not know people was having sx outside of my house . I missed all that 

Was going to say does anyone want the password but the 6 cameras are open to every one  really dont see the point why you need to have them secured. First thing you do is upload the video to facebook 

---

A lot of people have CCTV internally but even if you don't one of the most common attacks is to brick the camera by altering the firmware and corrupting the boot loader. The result is your camera goes offline and when you try to reboot it, you can't recover it even with replacement firmware as the camera won't respond to recovery attempts as the boot loader is corrupted. It's a common attack. Search the internet and you'll find plenty of examples. There are many people on forums who've cme for help only to find they have lost cameras to such attacks. Needless to say, it can get expensive eg 4 cameras on your network x £100 = £400 lost if all are attacked.

The 2nd way is to use the camera in a bot in DDoS attacks on companies. Equally serious and equally a problem for you as well as the internet and companies world wide.

Yes the majority don't use VPN's for remote veiwing because they are unaware of the issues of not doing so plus setting up a VPN can be scary when you don't know what you're doing.

[gipjon]

Maybe if you own a million pound house or a million pound business then maybe i would . But as a small business owner myself and living in a fairly standard house . I really dont think a theft would or could or even have that kind of brain power to hack the camera.  Plus if he could then he/she would make a lot more money in I T . So i very doubts he/she would be the Local thrug

[Br04dB4ndAl]

Most targets are private homes. In a recent hack in the East, 50,000 home secuirty cameras were hacked by 1 hacker alone.

They're not after theft. Sometimes it's to simply put footage online. Sometimes it's to extort or terrify the owner. A lot of the time it's simple vandalism - alter the firmware and brick the camera. A lot of the time it's also to install firmware that turns the camera into a bot to form a network of tens of thousands of home security bot cameras world wide and then use those to launch DDoS attacks of major companies / Government agencies.

The whole I'm just a home user they have no interest in me doesn't apply. They're interesated in any camera they can get into.

Recently there was a whole issue in the USA of Ring cameras getting hacked and home owners getting harassed and extorted by criminals:

https://abcnews.go.com/GMA/News/video/terrifying-video-familys-hacked-ring-camera-system-67704081

The way into cameras isn't hard even for a local thug as many exploits and the methods are posted online in hacker forms. Alos, it's not local thugs. Often hackers are in China or other places around the world and are proficient in IT. As I said above, Shodan, exposes every single device connected to the internet world wide along with it's type, location, IP Address etc in a single search unless it's protected by a VPN.

As I said elsewhere, search CCTV forums and ask the question, you'll find a lot of home users who've had cameras hacked and bricked.

There's an article here that mentions the dnager of port forwarding and just how quickly cameras get hacked:
https://betanews.com/2016/03/10/cctv-cameras-are-easy-to-hack/

[Jayach]

@Br04dB4ndAl

Have you ever configured a VPN server/client previously, or is this all theoretical based on what you have read on the websites you have posted.

What were you doing on your previous ISP?

[gipjon]

In ref to DDoS attacks

Its very unlikely There are a lot easily way to send DDoS attacks on some one's connection.  

Thats like saying dont buy a car and leave it on your drive . Park it round thr corner because if a local thug brakes into your house .he could steal the car to move the tv and video machine 

[gipjon]

There are loads of very misleading vpn video's praying on people who are worried.  Being a vpn reseller can be big bucks hence all the video's .

Using a vpn may stop vodafone seeing your website history but hacker's can still get your original ip . Your original ip is stored in and on loads of files in your pc. Sorry to say but a VPN are not some magical security thing most people think they are .

Does your pc have encryption = NO

does your data have encryption after it leaves the vpn = no

A VPN also forwarded the data back to your pc as well. It does not stop data. its a redirect service that works both ways