JAVA PERMISSIONS and webcam - question

[Bobby A]

Hi,

Can anyone tell me if I possibly, inadvertently, might have broadcast my webcam
to the other computers on my home network? For some reason, I recall
changing the java permissions to "Custom" and "I/O Access to all network
addresses". I am running Windows 98 (first edition) on my HP 8485Z. The
network is set up with my PC being hard-wired into a Linksys Wireless G type
router. The other two PCs are wirelessly connected to it and the router is the
gateway. The other PCs have Windows XP. The router's WEP encrypted
security was not active. Could the other computers have just picked it up just
because I was broadcasting? When I realized that that might have happened, I
changed the settings back. Could Windows XP have detected the broadcast and
played it, or would they have to be logged into the webcam website to receive
it? I had been getting some funny looks lately and I wonder if that is the
reason. It could be sort of embarrassing.

Thanks in advance for your help.

Bob

 

[Roedy Green]

Can anyone tell me if I possibly, inadvertently, might have broadcast my webcam
to the other computers on my home network? For some reason, I recall
changing the java permissions to "Custom" and "I/O Access to all network
addresses". I am running Windows 98 (first edition) on my HP 8485Z. The
network is set up with my PC being hard-wired into a Linksys Wireless G type
router. The other two PCs are wirelessly connected to it and the router is the
gateway. The other PCs have Windows XP. The router's WEP encrypted
security was not active. Could the other computers have just picked it up just
because I was broadcasting? When I realized that that might have happened, I
changed the settings back. Could Windows XP have detected the broadcast and
played it, or would they have to be logged into the webcam website to receive
it? I had been getting some funny looks lately and I wonder if that is the
reason. It could be sort of embarrassing.

Java Applets cannot talk to your webcam without being signed. You
unless you oked running a signed Applet you are safe. However, ANY
program you downloaded, including flash ones, CAN snoop on you.

It does not matter what you said to your router. A snoop could pass
the stream through as http, masquerading as an innocent web page
request.

 

[Bobby A]

Java Applets cannot talk to your webcam without being signed. You
unless you oked running a signed Applet you are safe. However, ANY
program you downloaded, including flash ones, CAN snoop on you.

It does not matter what you said to your router. A snoop could pass
the stream through as http, masquerading as an innocent web page
request.

I thought that "Signed" just meant that the author of an object or app
did the approved processes necessary, in order to comply with certain
standards.

That is what I think I may have done, (oked running a signed applet),
without realizing what I was doing. The other two PCs on my home
network would not be intentionally snooping. I am just wondering if,
given the situation, the stream might have just appeared on one or
both, spontaneously. They are both usually left turned on and on line
(cable) all the time. The website I was on allows you to view and
chat with other members who are logged in. The cam was not in the
"Private Mode" (password protected).

Unfortunately, I can't check my exact settings because, when I click
on java custom settings, the edit box no longer appears. That may be
due to me uninstalling the java and downloading and installing the
latest version from Sun. Perhaps I shredded a java cache or .DAT file
that I shouldn't have. There were 3 versions in my "Add/Remove
Programs" control (all called "Java Runtime..."). One left an old
icon link in "Control Panel" (not the coffee cup, but the red-nosed
wizard characature). When I click that it just says "The system
cannot find the registry key specified:
HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.3.1_01". Should
that one have stayed in there, or is it just that the uninstall did
not remove the icon? Also, I don't find "Microsoft Virtual Machine"
(isn't that their version of java?) listed anywhere.

I guess it's not that big a deal. If it happened, it happened.
Knowing might tell me whether people are acting strangely for a
reason, or for no fault of mine.

Thanks again, Bob

 

[Andrew Thompson]

I thought that "Signed" just meant that the author of an object or app
did the approved processes necessary, in order to comply with certain
standards.

A JWS like this, yes. An example dialog
might look like this..
<http://www.physci.org/install/security.jsp>

I made my own security certificate.

The certificate may also be registered
with VeriSign or such so that the message
"Warning: failed to verify the authenticity
of this certificate.." is gone.

That is what I think I may have done,
(oked running a signed applet),...

If you have done that, all bets are off.

Note the first line (but ignore first two words)
of the dialog shown at that link.
"This application is requesting unrestricted access
to your local machine and network."

Same for applets, if you have accepted a
signed applet with all permissions, it can do
...pretty much as it damn well pleases.

All file operations, networking, printing..
everything is now within it's grasp.

 

[Roedy Green]

I thought that "Signed" just meant that the author of an object or app
did the approved processes necessary, in order to comply with certain
standards.

See http://mindprod.com/jgloss/signedapplet.html
and chase links.

Signing proves who wrote the program and that it has been untampered
with. It implies it potentially could damage a machine.

 

[perry]

bob,

get off the caffine, before you are lose your mind!

you are working way too hard.

- perry

 

[perry]

were you running a java applet to capture the video images ? if so, then
anyone who has access to the origion of the java applet could
theoretically have had a free broadcast but.... i really don't think
it's possible to keep a browser window or java app running for days on
end on a Windows 98 machine. it's not one of the things that can happen
except with alot of effort.

true, with the rediculas security on windows it is remotely possible
that someone could run apps on your machine, perhaps start a camera but
it's not that likely....

what software were you running to broadcast with your web cam ?

- perry

ps.
personally, i think you just need a little vaction myself.