The first thing you notice about @FFD8FFDB is its inscrutability. But it’s the next thing you’ll notice that will really get at you.
Every few minutes, the Twitter bottweets a grainy, context-free scene accompanied by a line of strangely formatted gibberish.
It’s merely after you start digging into the how the bot actually works that it becomes clear the project is dependent upon a profoundly disquieting foundationhighlighting one of the major privacy loopholes in the modern telecommunication infrastructure.
Here’s how it works: The software behind @FFD8FFDB scans the Internet for webcams whose operators have left them unsecured, capturing screenshots from the feeds, and then tweets them.
The bot is the job of Derek Arnold, a Minneapolis-based Web developer. While @FFD8FFDB teaches an important lesson about privacy, Arnold said he generated the bot chiefly as an exercise in aesthetics.
Mostly I wanted to use a somewhat predictable, but unreliable imagery source( unsecured populace network cameras) as the basis for some fun with video filtering, Arnold explained in an email to the Daily Dot. He compiles the list of unsecured cameras using some network tools to find cameras that are linked to business Internet networks.
Arnold personally selects the cameras himself, which he does to ensure the bot isn’t tweeting out images that are too disclosing of strangers’ personal lives. I ran this route because, while there are many lists of cameras available online … my goal wasn’t titillation, he told. Whenever he comes across cameras broadcasting from people’s homes, he immediately blocks them from the bot’s list of source cameras.
I tended to lean on cameras that are in outdoors, public or business sets rather than in people’s homes, which was fairly easy since I chose not to scan residential ISP blocks, Arnold said.
The resulting images, which Arnold processes through video filters to give a processed and washed-out seem, generally out demonstrate deserted or near-deserted office streetscapes and office building interiors mixed in with windows into places like ski resorts and slot racing tracks. Most of the spaces portrayed are desolate, but some do have unsuspecting human subjects.
Arnold noted that there are many places online to easily locate webcams that are available to anyone with an Internet connection. One of those avenues is called Shodan, a search engine launched in 2009 that enables users to identity hundreds of millions of different Internet-connected devices, from people’s home routers to traffic signals to, yes, even webcams.
The operators of many webcams haven’t bothered to turn on any security features, entailing anyone who can find an unsecured device’s IP address is able to gain access to it.
In a talk at the 2012 Defcon cybersecurity conference in Las Vegas, cybersecurity researcher Dan Tentler explained how heused Shodan to access the controls that would allow him to potentially do things like defrost a Danish hockey rink or switch off a French hydroelectric plant.
In ablog postabout the @FFD8FFDB project, Arnold explained that the aesthetic of the captured images trump the security implications the bot sets on display.
Once you ensure past the titillation of the intrusion, some of the vantage points have a composure of their own, Arnold wrote.The camera installers motives are unknown to me, but can be inferred. Sometimes its a public camera, employed promotionally, so the scene feelings composed and ideal.
Other days the cameras purpose is security, in which instance the angles are harsher, the composition worse, he continued. The proprietor has crammed the device into some dusty corner, vying for space with cobwebs and condoms. But even the harshness of this viewpoint provides an aesthetic view. This view feels dystopian, and the hammer strikes a wire in ourselves and our personal impression of the world.
Arnold noted that he hasn’t received much pushback for the bot potentially contravening anyone’s privacy.
I’ve merely had a couple of people confounded by it, but I don’t suppose people are mainly creeped out, he told. Maybe they are, but I’d tell most people that interact with it or me tend to say positive things, as I think they get that it’s more of an aesthetic endeavor without any lofty ideals or lessons to learn from it.
While it wasn’t Arnold’s primary goal to highlight the insecurity of many webcams, he admits that its inherent voyeurism does have a point. Obviously one of the things that attains such projects a little fun is that it’s slightly transgressive, Arnold told, but I wouldn’t call that the primary goal.