[thelist] upload webcam images securely.

[Eduardo Kienetz]

On Fri, May 30, 2008 at 10:13 AM, Bill Moseley <moseley at hank.org> wrote:
> Yesterday someone asked me to add a webcam feature to a web site.
>
> The webcam is connected to a Windows machine that is shared by a
> number of people and I would consider the machine insecure.
> This Windows machine is on a pretty slow link and has a dynamic IP.
>
> The website is hosted and on Linux.
>
> The webcam has software that can FTP the images.  The website does
> have an FTP account available, but no anonymous FTP and the
> credentials would be the same to log into the website's shell account.
>
> No way would I put the website's shell account credentials on this
> machine.  But, I'd be willing to provide for a less secure way to just
> transfer the image.  Hacking the Windows machine would allow someone
> to upload random images, of course, but that would limit the damage
> (not that a nice porn image on their home page would not be
> damaging. ;)
>
> Maybe there's an artifact on the real image I can look for to
> authenticate that it's really from the webcam.

Do you have root access to the Linux machine?

-- 
Eduardo Bacchi Kienetz