LAN security

fj12ryder wrote:

dryfly wrote:
I've often wondered, with all the remote access to home networks, do folks really understand the concerns. We have lots of homeowners looking at their IP cameras on their cell phones and laptops, thermostats being controlled, and many automated home functions being controlled remotely.

I would bet this is being accomplished by initiating port forwarding on routers, or using P2P networks. The point is if you can remotely access your network, anyone can.

Now I realize some have initiated VPN tunneling and/or vlans which go a long way towards a secure network, but just how many have taken precautions like this to prevent serious intrusions?

Just wondering what "serious access" would amount to when you're talking about thermostats, doorbells, maybe lights? Maybe remote access to indoor cameras to spy on people when they're home?

I doubt there are serious hackers out there that want to look at your backyard camera or monitor what temp your thermostat is set at. I also doubt many home burglars are sophisticated to the point they can hack into your LAN.

The serious issue is someone accessing your LAN and monitoring your computer activities.

Another serious issue for those with IP cameras is the hacker being able to intrude into the camera, which is a small computer itself, and use it for a component of a "botnet". Googling this issue will show this is a very common event with many hacker computers scanning for open ports on a router (commonly caused by port forwarding to gain remote access to one's home).

Here is an example:

https://www.forbes.com/sites/thomasbrewster/2017/10/23/reaper-botnet-hacking-iot-cctv-iot-cctv-cameras/#1a68f18a38f7

I'm not an IT person so hope someone on here with a lot of network experience will comment.

In the Los Angeles area most burglaries are not sophisticated....they are daytime, no car in the driveway, kick the door in...so I’m not concerned.

Imagine you have cameras hooked to your network so you can record movement.. And a hacker hooks up and records movement.. You (or perhaps your teenage daughter) walking through the house.. ah-natural.

No.. I do have cameras but no wi-fi. NO lan. Just a hard card I have to sneakernet to a computer to view. Sneakernet is kind of hard to hack when the man wearing the sneakers is like 300 pounds.

dryfly wrote:
I've often wondered, with all the remote access to home networks, do folks really understand the concerns. We have lots of homeowners looking at their IP cameras on their cell phones and laptops, thermostats being controlled, and many automated home functions being controlled remotely.

I would bet this is being accomplished by initiating port forwarding on routers, or using P2P networks. The point is if you can remotely access your network, anyone can.

Now I realize some have initiated VPN tunneling and/or vlans which go a long way towards a secure network, but just how many have taken precautions like this to prevent serious intrusions?

Just wondering what "serious access" would amount to when you're talking about thermostats, doorbells, maybe lights? Maybe remote access to indoor cameras to spy on people when they're home?

One item I saw in the news...
Remote control thermostats could be monitored by thieves and let them know when the house was empty. If your AC is set to come on at 4pm that means you’ll be home by 5pm.... etc.

Whole neighbourhoods could be monitored.