Threat Level: green Handler on Duty: Deborah Hale

SANS ISC: InfoSec Handlers Diary Blog - Kodak EasyShare Wireless Picture Frame RSS Feed is world readable InfoSec Handlers Diary Blog


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Kodak EasyShare Wireless Picture Frame RSS Feed is world readable

Published: 2010-01-05
Last Updated: 2010-01-05 21:53:54 UTC
by Toby Kohlenberg (Version: 1)
0 comment(s)

Garrett pointed us at this blog post: http://seattlewireless.net/~casey/?p=13 which discusses an interesting.... feature of the Kodack EasyShare Wireless Picture Frames. The frames use a site called FrameChannel to read an RSS feed consisting of anything you would like which is pulled down and then displayed. The catch is that the feeds are public and easily discoverable. At this point, when I looked through a handful of possible feeds it appears that they have nothing but the default images available, which suggests that it may have been taken offline at least for the moment. The comments for the post include a lovely example script for bruteforcing all possible URLs for the frames.

Keywords:
0 comment(s)
Diary Archives