Website Has Footage From 700 Cameras in Taiwan 台灣逾7百隻監視器畫面 被刊登國外網站

Many people install home security cameras to keep an eye on their children or pets, but many are unaware that the footage may be accessible to others. People recently discovered that footage from at least 700 security cameras located in Taiwan was available on foreign website "Insecam." Information security experts remind the public to use IoT authentication and to change default passwords.

It's clear that all of this footage came from private security cameras, but it was all still available for public viewing on the website "Insecam," which bills itself as the world's biggest directory of online surveillance security cameras. Many people install these devices in their homes to keep an eye on their children or pets, and they find it incredible that footage can end up online.

Ms. Lin, Resident: “It's of course not good if everyone can see the footage from cameras, especially those installed in homes. ”

People recently discovered that footage from at least 700 cameras installed all around Taiwan was accessible on "Insecam," including cameras installed inside homes and stores. The majority of the footage came from devices with an "Hi3516" chip manufactured by Chinese semiconductor company HiSilicon.

Mr. Wu, Security Camera Businessperson: “There are security cameras with chips manufactured in China and also Taiwan. The entire motherboard is like a United Nations. There are components from Taiwan, from China. It's hard to avoid mixing components when manufacturing.”

There are many brands of security cameras made in many different places. Experts say people need to change the default passwords immediately after installation regardless of the country of origin.

Cha Shi-cho, Director, Taiwan Information Security Center, NTUST: “There are two passwords, one is for the internal connection and the other is for external access to cloud services. You should always use complicated passwords.”

Those with installed cameras should change the passwords as well as regularly update the software. Those planning to install cameras are advised to choose devices with certification marks and with Taiwan IoT cybersecurity certification.

無論店內或家門外，明明是私人監視器，在網路攝影機網站insecam上卻能不設防，全被看見。民眾為了安全或查看小孩和寵物狀況裝設的監視器，畫面卻有可能流到外面網站，讓裝設監視器的民眾覺得很離譜。

民眾林小姐表示：「除非說他是特別裝在房間什麼的，所以隱私會比較容易外洩，那當然被人家觀看的感覺一定是不好。」

有民眾發現，insecam這個網站上有至少700多支台灣各地的監視器畫面外流，包含私人住家或店家等，點選畫面後，製造商欄位大多數顯示Hi3516，是一款來自中國海思半導體公司的晶片。

監視器業者吳先生表示：「監視器的晶片大陸的跟台灣的都有，整個機板來講應該算是個聯合國啦，台灣的零件、大陸的零件已經都很難避免混合在一起製造。」監視器廠牌多且雜，無論製造國在哪裡，業者跟資安專家都提醒，安裝後應立刻更新密碼。

台科大資安中心主任查士朝表示：「因為他是有兩個密碼，一個是內部連線的密碼，一個是你外部註冊到他雲端服務的密碼，所以密碼來講也要去取比較複雜性的這個密碼。」

已經裝設的民眾不只要換密碼，還要定期更新系統，防止漏洞。而準備裝設的民眾，專家也提醒要選有商品檢驗標章，同時通過台灣IoT資安認證的商品，對品質及資安才有保障。