After looking up the ip address, I notified the ISP which in turn notified the customer and the camera was taken offline within hours.
While it may not be unexpected to us that such insecure cameras are sold, less tech-savvy users simply don't know about the risks.
One was in a retail shop like 100m from our office, one of my colleagues actually went there to warn the personel, and it was taken down in the next minutes (I think they cut off the power of the cameras until necessary action was taken).
An other one was in a restaurant, right above the cashier and (most importantly) the credit card terminal. The name of the restaurant was visible on a floor mat, so I could find very easily the website and the e-mail address to send an e-mail to. But then I struggled when writing the e-mail. I didn't want to sound like a hacker (and was afraid to be prosecuted), but also I really wanted them to take it down, by citing some laws here in France that is very strict about video surveillance on the workplace.
In the end I didn't send any email. I'm not a lawyer, and there was too much risk IMO. Maybe I'll try going through the ISP next time I browse the cameras.
It'd be ironic if they threw more resources at finding the "hacker" than at securing their network...
It's to be also noted that you live in a country, where ISPs understood what you were telling, understood its urgency, communicated properly with the affected party and remedied it within hours.
There are countries where, in order to talk to a person who understands there is a public facing IP camera it will take extraordinary effort at best and at worst you will be termed 'hacker' for visiting the 'Insecam' website and police will knock on your door within next couple of months to a year; Now good luck finding someone in the police who will listen to you and actually understands it.
It would be nice to automate this flow as much as possible to reduce the friction for concerned people.
I have a buddy who did a revival a few years back, don't know how bit rotted it is but here's a link:
Imagine someone forgetting to protect the security cams of their meth lab or brothel.
PS: Living in Spain so I don't have much to complain about.
Indeed, Torino is not exactly on the sea. How are this location obtained, geoip?
I used to have one overlooking the river in my mother's house. I spent a lot of time tuning it so it looked really great, both day and night (at night using really long exposure times). I used high quality webcams at first and then the 5MP raspberry cam (later modded with a better lens).
But even the "1080p" security cams that cost $200 or more have horrible quality compared to those. They're good for security purposes yes, but I wouldn't use them to advertise the views from a hotel.
I really wish there were some really HQ webcams around the world, think 4K or even 8K (so you could zoom in even on a 4K screen), with good night performance, it would be so great to really get a feel for a city. These cams are just so poor.
One camera pointed at a ski slope. (The location was wrong.) For all I know, it could be on some ski slope's web page under "current conditions."
Other cameras have ocean or downtown views.
IANAL and don't claim this would mean a likely prosecution risk, just something to bear in mind.
Happy to be corrected!
Looks like a call center of sorts , essentially an IT company , not keeping their shit secure :(
They probably do an IP location lookup which tends to be pretty inaccurate.
They still run!