British astrophysicist Stephen Hawking said,
"The only form of life we've created
is computer virus.
We've created them in our image and our likeness,
and they're purely destructive."
Hi, and welcome to "Case Closed."
We could've made robots
to help us do a million things, but...
Well, that's the way it is.
Let's see what's our first case today.
Mr. Director, let both parties in.
When you pay for a service, it's supposed to be safe.
Nowadays, technology has no security.
Good afternoon. Welcome.
-Good afternoon. -Good afternoon.
Elisa, you're suing Alessandra.
Tell me about the lawsuit and what you're asking.
Well, I'm suing Alessandra
for 50,000 dollars.
for emotional damage
caused by the filming of some videos
of my home and my daughter...
filmed by cameras and monitors
I purchased from her.
They were sent via Internet
to pedophile websites.
Holy cow!
Tell me...
Tell me what happened.
Okay, I'll tell you.
I've known her for many years.
I knew she owned a company
which worked with monitors, cameras
and home security systems.
No, not security systems. Just monitors.
Home security systems.
About a year ago,
I hired her services.
I hired a nanny who was staying alone with my daughter,
who is two now.
I was nervous because of what would happen.
I had to work,
and she offered a security system
with internal cameras
I could access from my workplace
via an application on my cell phone.
In real time.
-Yes, in real time. -Okay.
So I installed the cameras.
Everything was fine,
until the system stopped working for a week.
The cameras didn't record.
I called the company... I called her to ask
what was going on, because I couldn't see my girl.
I couldn't access the application on my phone.
I couldn't reach the company,
I couldn't reach her,
I couldn't access the company website
to see what I could do with the application.
Then I was in for a shock.
Four or five days later, I got an e-mail from the company
that said that they had a problem with a virus,
that they'd been hacked
and they had to change the cameras
and the server...
I mean, what they installed at home.
And the passwords too.
Of course.
I thought they were going to change the cameras
and they were going to explain it to me,
but they didn't.
-Do you have the e-mail you got? -Yeah, it's here.
Let me see it, please.
Go back to your place.
How did you find out
these videos were on pedophile websites?
I'll tell you.
After I couldn't access the system,
I got the e-mail
that said they were going to change the cameras.
I agreed to it, because I was paying for it, right?
I agreed to it, so they changed the cameras.
Three or four days later,
the police came to my house to interrogate me.
They showed me some videos
inside my home,
of my nanny, of my daughter,
where they're doing daily things at my house.
I brought those videos as proof.
So the police informed you that those videos
ended up on pedophile websites.
Yes, it was the police.
First, let's see
that e-mail you got from the security company.
It says, "In this e-mail we'd like to inform you
that our company has recently been under a cyber-attack
and our information may have been compromised.
So far, there's no confirmation
whether your personal information
is among these cases,
but, for security reasons, and for your protection,
we've decided to change the cameras and monitors
at your home.
We strongly advice you
to immediately change your passwords
to access the application.
Our customer care department
will contact you with our technical team
so as to set an appointment.
Besides, we strongly advice you
to immediately update the application on your phone.
Sincerely..."
Okay, let's see, then,
the images that ended up on pedophile websites.
There you can see the nanny changing the girl's clothes.
That's at home. And there she's bathing her.
That's normal.
Those images...
Are normal.
But, apparently, they're important for pedophiles.
It's sick.
As you can imagine,
they enjoy watching those images.
And you don't know...
They're blurring out my kid's face,
but pedophiles,
in the images the police showed me...
You're blurring her out because we're on a show,
but you can imagine.
But listen to this,
"Real boy and girl videos of all ages
and for every taste.
Pay us via Bitcoin,
and you'll get access right away."
They're selling them.
They're selling them to other pedophiles.
Sure, so it's not just that they stole these videos
or hacked into them,
now they've spread who knows where.
Besides, if the police got them,
pedophiles can get my home address
and my child's face.
I'm so upset about this. I'm very concerned.
I mean, I'm scared.
I'm afraid I might be followed,
or either my daughter or I might be kidnapped.
Well, I think everyone has everything on us.
I think we're everywhere.
I was looking for safety,
and I found unsafety within my own home.
That's why I'm suing her for 50,000 dollars
because I've been harmed.
I understand. What's your reply?
Good afternoon.
I don't think I have to pay for this lawsuit
because my company offers a monitoring system,
but not a security system.
You get security from watching what is happening at your house
through cameras and monitors.
I understand you're not a security company.
In case a burglar comes into my store
and takes our computers, files
and information from my office,
I wouldn't be considered responsible, right?
I'm not responsible
for them entering my store and robbing me.
But that's not what happened.
No. It's something like that, but digital.
It's digital, which is worse
because there's no track of who it was.
Then why are you changing the cameras?
The cameras are being changed
because a virus came into our servers.
They're being changed for safety.
We're changing all the cameras
to be sure that it wasn't because of the cameras.
It's the server, not the cameras.
I don't know how viruses work,
but it was thanks to a virus that these...
Pedophiles.
They accessed our servers
and copied our clients' videos.
But it's not something that I...
It happens everywhere every day.
The investigation is still under way.
The police went to her house. They're looking into it.
They're also investigating me.
It happens globally.
What security measures do you have on your servers?
We have our website, right?
It has codes and passwords that she can change.
In fact, when our technician installs all the equipment,
he recommends...
Every person decides whether to do it
once they know they should do it.
He recommends changing the passwords to every device
when you enter our website.
I mean, you're authorized,
so you access with a password,
which you have to change constantly for security reasons.
Everybody recommends it, even banks,
for every personal account you may have.
Where do you purchase your cameras?
They're from China.
Was the software also from China?
Everything is from there. This is a serious problem.
Any person who has a device connected to the Internet
and has a search engine like Shodan,
which is the one being used to obtain the information...
What's that?
It's a search engine, like Google.
But Shodan has access to your personal information
and anywhere else, like traffic lights,
and it can turn them all off in a city.
Then don't offer your services as safe.
I'll say it again. The services I offer...
What was safe
was you being able to watch your daughter.
That's the safe service they're offering.
Who's brought a witness?
I have a witness.
We'll take a brief recess, and we'll be right back
with more hM
Vicente Pimienta
is one of our Internet and social media experts.
I want him to clear up for us
this Shodan thing.
People don't know anything about it
and don't know how to protect themselves from it.
-What's your name? -Good afternoon. I'm Sofia.
Sofia.
Whose side are you on?
I'm Elisa's witness.
-The plaintiff. -Right.
I used to work for that woman's company.
-Alessandra. -Alessandra, right.
When I worked for her company,
many times I suggested
we should look for a security company
to fake an attack
in order to verify if our security was up to date
or if we were vulnerable.
She never agreed to it.
She didn't take my suggestion
because it cost money.
But it wasn't as much as it may cost her now
with the recent problems.
She never took my suggestion.
Okay.
-What's your name? -Maria.
I'm the witness for the defendant.
Well, there's no proof of where the attacks came from
or what happened to the system.
But I find it strange
that the person who started the lawsuit
because the videos were displayed
on a pedophilia website
had a relationship with a fugitive
regarding a pedophilia case.
Because it was...
They found child porn on his computer.
-There's no proof of that. -So it's strange.
Do you mean her partner?
No, her ex. Yes, ma'am.
It happened a year ago.
At the time he was arrested,
I dumped him, and he went to jail.
Then I found out in the news
that he posted bail.
But he escaped. He isn't here in the country.
Did you already have those cameras installed?
I did, but...
Maybe that's where the attack came from.
Who knows?
But it affected her, because she was sent the e-mail.
It couldn't have been him.
I left him a year ago. This is recent.
The only videos from my company that have showed up
are her daughter's.
Honestly, what happened scares me.
It's too much of a coincidence.
So you're suggesting that this person
may have caused this problem?
I'm not, but it's too much of a coincidence
that this person had this problem...
Tell him to come in.
I mean, I'm not saying anything,
but this person does have a problem,
he dated her a year ago, the cameras were there,
he had access to her computers and passwords
because they were dating...
Okay.
Listen, Mr. Pimienta,
I'd like you to explain us all
how this can happen.
The problem is that there's a new concept
called "the Internet of Things."
Even refrigerators, alarm clocks, and cameras
are connected to the Internet.
Each device has an IP address.
It turns out that there's a search engine,
just like Google, that, instead of searching for websites,
it searches for IP addresses.
So you can search for the IP addresses
of all the cameras that are connected.
-On top of that... -It's like "Find my phone."
When you lose your phone and you have to locate it.
It's a bit more complicated
because everything that's on the Internet is visible.
Google may not see it,
but this search engine is looking for IP addresses.
So it gives us a list of all the cameras
from traffic lights, airports, baby monitor cameras.
Every IP address.
It also gives us a list
of all default passwords and usernames
from those devices.
Those devices are from China,
and they have low security measures.
When you have access to the IP address
as well as the default username and password,
if people don't change it, it's easy to get in.
It just takes three seconds, and you're in.
If you don't have the password, you can use some software
which can break the password in three minutes.
So it's very dangerous.
Are you telling me that anybody
can turn off the cameras of, say, the traffic lights?
-Right. -Somebody can do that?
They can if the security isn't appropriate.
Why does this server exist? Why doesn't anybody turn it off?
Because it's completely legal.
I go to your house, from the outside, I can see
you're a Florida Power Light and a Comcast client
because there's a 220-volt cable.
I mean, it's visible information
that you can't hide.
How is it legal that strangers know
what I have or what I do,
who I live with,
and what my bank is?
It's illegal to get to the server,
to that IP address,
break the security and access.
But seeing the number, the model and brand of the server
or the software is legal.
It is illegal to break the password and get in.
But we're handing this to the thieves on a plate?
These are cyber thieves. They're sophisticated.
In the same way, universities use this to study
what kind of hardware or software is out there.
So it can be used both ways.
Yes, for good and for evil. For both.
Aren't there any laws
to punish these people
and find out who they are?
When it's a cyber-attack,
it falls under federal law,
which forbids this kind of activity, the hacking.
That's when you're breaking the law.
Otherwise, there are no laws to protect us.
In fact, the law does impose us the responsibility
of assuring the confidentiality and privacy
of the information we have.
Us, as lawyers, we have to deal with this right now.
It's a highly important issue because we're in charge
of the confidentiality of our clients' information.
So, if our net got hacked
at our law firm,
we'd be responsible
for the security measures we take...
-To protect the information. -To protect the information.
Is there any guarantee
that we can preserve that information forever
from any kind of attack?
No, but they'd investigate how hard we tried
to protect the information.
It's a bar association issue.
It's a Homeland Security issue.
They'd want to investigate the measures we took
to protect the privacy of information.
Okay.
Now, the ruling.
Emotional damage is the hardest to prove in court.
Thinking that pedophiles have pictures of your daughter,
well, it may make you have dark thoughts,
but I can't blame her for what's happened here.
I don't know whether it was their fault
or yours, or of the person who used to live with you.
You're all suspects in this.
Anyone can be a suspect.
If I punish her and reward you
because of the security flaw,
because of what happened here,
would be irresponsible of me.
Your lawsuit is rejected.
Good luck.
We'll pray to God that pedophiles
don't do anything but watch your daughter's pictures.
I have spoken.
Case closed.
Không có nhận xét nào:
Đăng nhận xét