DataSecurityExpert.co.uk - All Things Graeme Batsman

Chapter Author

Contact Graeme

Journalists, students, potential clients or anyone else email.......
graeme@datasecurityexpert.co.uk

Something private to say?
PGP public key

An example of very dumb/poor IoT security and some free tips: criminals please do secure your internet connected cameras at your cannabis farm!

Details: Category: Cyber Security (Personal); Published: 01 September 2022

Firstly, the content in this article has been under lock and key for over three years. Why? For legal and safety reasons. Do be careful when poking around on purpose or by accident in relation to criminal activity.

In one week some years ago I was training a bunch of apprentices in London. The five-day course was OSINT and of course it covered a module on Shodan plus a lot more. On the first day or two of the course, an enthusiastic boy called me on over to look at what he had found. When I was under 20 like him, I wouldn’t think too much about the dangers of looking into organised crime.

Swiftly I went over and laughed. By chance, without wanting to he found a cannabis farm on Insecam.org. This website has numerous categories including: bars, bridges, car parks, factories, hairdressers and farms where this “business” was listed some years back. Under the farm category typically you see cattle and on this occasion, it was an illicit type of farm.

Not again - please please please manage your sub-domains: General Mills offers cereal & free porn and Georgia State Government offers justice & naughty pictures

Details: Category: Blog; Published: 03 August 2022

Last month I found the British Council were offering free porn, and now a major cereal company and a justice department of an US state are also.

WARNING: This article contains some adult words later on - no legible images of course. Be careful visiting the site, especially on a work machine.
When something funny happens, it is bound to happen again, so I have the tendency to check months or years later. Guess what? More private and public organisations have the same problem.

Perhaps it is not coincidence some large organisations all have the same problems: sub-domain and a Microsoft Azure address showing adult content. That said these organisations should be monitoring sub-domains to ensure none have gone awry.

Even searching for the organisation or sub-domain CISO’s embarrassing brings up the porn site.

DataSecurityExpert “Special” Exposé #2 - Please manage your sub-domains unlike the British Council who now offer free adult content on top of arts, English and British culture

Details: Category: Cyber Security (Personal); Published: 11 July 2022

Firstly, the MoD’s social media accounts offered “great” free NFT investment advice and now a FCO sub-division offers free porn. Such a lovely government we have!

WARNING: This article contains some adult words later on - no legible images of course. Be careful visiting the site, especially on a work machine.
Personally, I do not go around hunting for funny things - they just find me, or I find them whilst looking for innocent content. Last weekend I was looking for SELT (Secure English Language Tests) which the British Council have information on, and I got more than I bargained for on a search result. It took a few looks to convince myself what I saw was actually related to The British Council’s main domain; britishcouncil.org.