Threat Level: green Handler on Duty: Tom Webb

SANS ISC: Kodak EasyShare Wireless Picture Frame RSS Feed is world readable - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Kodak EasyShare Wireless Picture Frame RSS Feed is world readable

Garrett pointed us at this blog post: http://seattlewireless.net/~casey/?p=13 which discusses an interesting.... feature of the Kodack EasyShare Wireless Picture Frames. The frames use a site called FrameChannel to read an RSS feed consisting of anything you would like which is pulled down and then displayed. The catch is that the feeds are public and easily discoverable. At this point, when I looked through a handful of possible feeds it appears that they have nothing but the default images available, which suggests that it may have been taken offline at least for the moment. The comments for the post include a lovely example script for bruteforcing all possible URLs for the frames.

Toby

68 Posts

Sign Up for Free or Log In to start participating in the conversation!