Canon yesterday issued security advisory concerning a security flaw in their Picture Transfer Protocol, the WiFi transfer protocol used on Canon cameras.
The security flaw was demonstrated by Israeli security company Check Point Research during DEF CON 2019. The security researchers were able to hijack a Canon EOS 80D using USB and wirelessly using WIFI.
The discovered vulnerabilities would allow a malicious actor to take over a target’s DSLR camera through both WiFi and USB, giving him full control over it. Such an infection could, for example, be used for installing a Ransomware on the camera, and demanding ransom for both the images and the camera itself. Not a nice scenario for professionals.
An attacker who would want to use a similar approach to perform a real-world ransomware attack on a EOS 80D will need to set-up a rogue WiFi Access Point and initiate the exploit (something that can certainly be done by many sufficiently experienced attackers although will require the Camera’s WIFI to be turned on).
The video below shows how Check Point Research exploited the Canon EOS 80D using the cited security flaw. By building on existing knowledge of Magic Lantern, they were able to build a ransomware.
Check Point Research promptly informed Canon. While waiting for the firmware updates, Canon recommends the following:
Ensure the suitability of security-related settings of the devices connected to the camera, such as the PC, mobile device, and router being used.
Do not connect the camera to a PC or mobile device that is being used in an unsecure network, such as in a free Wi-Fi environment.
Do not connect the camera to a PC or mobile device that is potentially exposed to virus infections.
Disable the camera’s network functions when they are not being used.
Download the official firmware from Canon’s website when performing a camera firmware update.
Canon already issued a firmware update for the Canon EOS 80D, and more updates will follow.
Unfortunately, that’s not the end of the story. The researchers found multiple critical vulnerabilities in Canon’s Picture Transfer Protocol. And it’s likely these vulnerabilities are present in other manufacture’s PTP as well.
It seems a lo of firmware updates are coming to Canon DSLRs, MILCs, and PowerShots. Good to know that Canon takes this issues seriously.
Canon product advisory:
Regarding the security advisory for Canon digital cameras related to PTP (Picture Transfer Protocol) communication functions and firmware update functions.
Thank you very much for using Canon products.
An international team of security researchers has drawn our attention to a vulnerability related to communications via the Picture Transfer Protocol (PTP), which is used by Canon digital cameras, as well as a vulnerability related to firmware updates. (CVE-ID:CVE-2019-5994, CVE-2019-5995, CVE-2019-5998, CVE-2019-5999, CVE-2019-6000, CVE-2019-6001）
Due to these vulnerabilities, the potential exists for third-party attack on the camera if the camera is connected to a PC or mobile device that has been hijacked through an unsecured network.
At this point, there have been no confirmed cases of these vulnerabilities being exploited to cause harm, but in order to ensure that our customers can use our products securely, we would like to inform you of the following workarounds for this issue.
Ensure the suitability of security-related settings of the devices connected to the camera, such as the PC, mobile device, and router being used.
Do not connect the camera to a PC or mobile device that is being used in an unsecure network, such as in a free Wi-Fi environment.
Do not connect the camera to a PC or mobile device that is potentially exposed to virus infections.
Disable the camera’s network functions when they are not being used.
Download the official firmware from Canon’s website when performing a camera firmware update.
Models Affected
These vulnerabilities affect the EOS-series digital SLR and mirrorless cameras PowerShot SX740 HS, PowerShot SX70 HS, PowerShot G5X Mark II.
Firmware Update
There is an increased use of PCs and mobile devices in an unsecure (free Wi-Fi) network environment where customers are not aware of the network security. As it has become prevalent to transfer images from a camera to a mobile device via Wi-Fi connection, we will implement firmware updates for the following models that are equipped with the Wi-Fi function.
Use for independent films, documentaries, blogs and more.
Designed from carbon fiber polycarbonate composite.
Multifunction grip allows single hand operation.
2 models with 6K at 6144 x 3456 and 4K at 4096 x 2160.
Compatible with MFT or EF lens mounts.
Wide 13 stops of dynamic range for film looks.
Up to 25600 ISO for incredible low light performance.
Records full resolution up to 60 fps or 120 fps windowed.
Standard open file formats compatible with popular software.
Built in SD, UHS-II and CFast card recorders.
Features incredible quality Blackmagic RAW recording.
Built in 5″ touchscreen allows accurate focus when shooting 6K.
Blackmagic OS as used in URSA Mini and URSA Broadcast cameras.
Includes Blackmagic Generation 4 Color Science.
Features full size HDMI for monitoring with status overlay.
Professional mini XLR input with 48 volt phantom power.
3D LUTs can be applied for both monitoring and recording.
USB-C port allows recording directly to external disk.
Built in timecode generator for sync muli-camera shoots.
Supports still frame capture up to 21.2 megapixel.
Localized for 11 popular languages.
Supports remote camera control via Bluetooth.
Powers via 12V DC input and can recharge via USB-C.
Includes full DaVinci Resolve Studio for post production.
Blackmagic announced the Blackmagic Pocket Cinema Camera 6K with Canon EF mount, and it has a pretty competitive price. Blackmagic Pocket Cinema Camera 6K is available now for US$2,495.
Fremont, CA, USA – Thursday, 8 August 2019 – Blackmagic Design today announced the Blackmagic Pocket Cinema Camera 6K, a new handheld digital film camera with a full Super 35 size 6K HDR image sensor, 13 stops of dynamic range, an EF lens mount and dual native ISO up to 25,600 for incredible low light performance. This new model builds on the popularity of the Blackmagic Pocket Cinema Camera 4K but has a larger Super 35 sensor size with 6K resolution, allowing higher image quality. The EF lens mount model works with a wide range of lenses from companies such as Canon, Zeiss, Sigma and Schneider.
Blackmagic Pocket Cinema Camera 6K is available immediately from Blackmagic Design resellers worldwide for US$2,495.
The elegant design of the Blackmagic Pocket Cinema Camera packs an incredible number of high end digital film features into a miniaturized, handheld design. Made from lightweight carbon fiber polycarbonate composite, the camera features a multifunction handgrip with all controls for recording, ISO, WB and shutter angle right at their fingertips. Because it’s an advanced digital film camera, the sensor is designed to reduce thermal noise allowing cleaner shadows and higher ISO. Plus the large 5 inch LCD makes it possible to get perfect focus at 4K and 6K resolutions.
Featuring a larger 6144 x 3456 Super 35 sensor and EF lens mount, the Blackmagic Pocket Cinema Camera 6K lets customers use larger EF photographic lenses to create cinematic images with shallower depth of field, allowing creative defocussed backgrounds and gorgeous bokeh effects. This means that customers can shoot in 6K and then in post production zoom and re-frame to allow wide shots and close ups to be created, all from a single camera and without losing image quality.
Blackmagic Pocket Cinema Camera 4K and 6K both have an incredible 13 stops of dynamic range which means they preserve more detail in the lightest and darkest areas of an image than simple video cameras can. This allows customers to set exposure for an indoor scene such as a cafe and still retain the details of bright outdoor light coming through a window. Customers even get more colors than the standard DCI-P3 colorspace used for feature films.
The Blackmagic Pocket Cinema Camera features dual gain ISO up to 25,600, which means both the 4K and 6K models are optimized to minimize grain or noise in images, while maintaining the full dynamic range of the sensor. The native ISO of 400 is ideal for scenes with on-set lighting. The gain is set automatically as they adjust the ISO setting on the camera, so it’s easy to capture great images when they don’t have time to set up lights.
The new 6K model will shoot up to 50 fps at 6144 x 3456 16:9 or 60 fps at 6144 x 2560 2.4:1 and 60 fps at 5744 x 3024 17:9. For higher frame rates they can window the sensor and shoot up to 120 fps at 2.8K 2868 x 1512 17:9. Customers can even work in true anamorphic 6:5 using anamorphic lenses in 3.7K 60 fps at 3728 x 3104.
Blackmagic Pocket Cinema Camera records using standard open file formats so customers don’t have to waste time transcoding media. Recording works in industry standard 10-bit Apple ProRes files in all formats up to 4K or 12-bit Blackmagic RAW in all formats up to 6K. Best of all media files work on all operating systems plus customers can format media cards and disks in HFS+ for Mac and ExFAT for Windows.
The Blackmagic Pocket Cinema Camera features built in CFast and SD UHS-II card recorders, and a USB-C expansion port for recording direct to an external media disk. Customers can use regular SD cards for HD or higher performance UHS-II and CFast cards for native 4K or 6K when using Blackmagic RAW. Imagine capturing over an hour of full resolution 6K images on a single 256GB SD UHS-II card.
Blackmagic RAW is a revolutionary new format designed to capture and preserve the quality of the sensor data from their camera. Video formats such as H.264 are highly compressed, plus add noise and weird artifacts, causing original sensor detail to be lost forever. Blackmagic RAW eliminates this problem and gives them stunning images with incredible detail and color throughout the production pipeline from camera to edit, color and mastering. It also saves camera settings as metadata so customers can set ISO, white balance and exposure in camera or override them later while editing, all without any loss of quality. Blackmagic RAW files are also small and fast to use making them easy to work with.
The rear of the Blackmagic Pocket Cinema Camera features a large, bright 5 inch touchscreen that makes it easy for customers to frame shots and accurately focus. It’s like getting a built in Blackmagic Video Assist with their camera. The touchscreen displays critical information while shooting, as well as menus for setting up the camera and intuitive touch to focus controls. On screen overlays show status, a histogram, focus and peaking indicators, levels, frame guides, playback controls and more.
With the advanced Blackmagic OS, customers get an intuitive and user friendly camera operating system based on the latest technology. The interface uses simple tap and swipe gestures to adjust settings, add metadata and view recording status. Customers also get full control over advanced camera features such as on screen focus and exposure tools, 3D LUTs, HDR, metadata entry, timecode, Blackmagic RAW settings and more.
Featuring the same Generation 4 Color Science as the high end URSA Mini Pro G2, the Pocket Cinema Camera delivers stunning, accurate skin tones and faithful color in every shot. Blackmagic Generation 4 Color Science uses a complex dynamic 12-bit gamma curve designed to capture more color data in the highlights and shadows, so they get better looking images. The color science also handles some of the complex Blackmagic RAW image processing, so color and dynamic range data from the sensor is preserved via metadata which customers can use in post production.
The camera includes a full size HDMI connector for monitoring with support for HDR and clean 10-bit output. There’s also a mini XLR connection with 48 volt phantom power for attaching professional microphones, a 3.5 mm video camera style microphone input, headphone connection and a professional locking DC power connector.
Digital film cameras shoot logarithmic colorspace to preserve the dynamic range, which is great for later post production, however when these files are viewed on a monitor they can look flat and washed out. 3D LUTs solve this problem because they allow customers to apply a “look” to the monitor so customers get an idea of how the finished images will look like when editing. The Pocket Cinema Camera works with industry standard 17 and 33 point 3D LUT files, or customers can work with the built in LUTs such as Extended Video, Film to Video, Film to Rec.2020 and more.
Professional cameras include professional features and customers also get a built in timecode generator, allowing shooting with more than one camera while keeping perfect sync. Simply plug in an external timecode generator such as Tentacle Sync into the 3.5 mm audio jack and the camera will automatically detect timecode and lock the internal generator. Now each camera can start and stop recording and all the shots from all cameras will have the same matched timecode. Imagine shooting a music festival with multiple roving cameras. Best of all the new DaVinci Resolve 16.1 will automatically find and sync the shots from all cameras so they don’t need to waste time sorting through thousands of shots.
The Blackmagic Pocket Cinema Camera uses standard removable LP-E6 type batteries and also features a locking DC power connector so they never have to worry about losing power in the middle of a shoot. The included AC plug pack can power the camera and charge the battery at the same time. The USB-C expansion port can also be used to charge the battery from portable battery packs, mobile phone chargers or a laptop computer. Customers can even add an optional Blackmagic Pocket Battery Grip that lets customers use 2 batteries to dramatically extend the power of the camera.
Blackmagic Pocket Cinema Camera 4K and 6K models include a full version of DaVinci Resolve Studio, which is the same software used in Hollywood for creating high end feature films, episodic television shows, commercials and more. DaVinci Resolve features a revolutionary new cut page with intelligent editing tools and innovative new features designed to help customers quickly find the footage customers want, edit it together and output it fast. In addition to the new cut page, customers also get DaVinci’s legendary professional editing, advanced color correction, audio post and visual effects tools, all in a single software application.
“The Blackmagic Pocket Cinema Camera 6K features incredible new 6K imaging and EF lens support that customers have asked for,” said Grant Petty, Blackmagic Design CEO. “It has all of the great features customers love from the 4K model, but now adds an EF lens, increased 6K resolution for even higher quality images and more. Plus, with the built in Video Assist features, customers don’t have to purchase and carry around extra equipment. DaVinci Resolve Studio is also included, making it an incredible all in one solution that enables anyone to be creative and tell a story.”
Tamron issued a product advisory about compatibility with the Canon EOS R and EOS RP full frame mirrorless cameras.
Dear users and potential purchasers of Tamron interchangeable lenses.
Thank you for using Tamron products and for your continuous support.
We would like to announce that we have clarified compatibility of following Tamron Di & Di II lenses on Canon EOS R and EOS RP with Canon “Mount Adapter EF-EOS R”.
Planned to be released (F/W release dates will be announced once they are decided.)
SP 15-30mm F/2.8 Di VC USD (Model A012) for Canon (*) SP 70-200mm F/2.8 Di VC USD (Model A009) for Canon (*) SP 70-300mm F/4-5.6 Di VC USD (Model A005) for Canon (*) SP 70-300mm F/4-5.6 Di VC USD (Model A030) for Canon (*) SP 90mm F/2.8 Di VC USD MACRO (Model F004) for Canon (*)
Compatible as they are
SP 24-70mm F/2.8 Di VC USD (Model A007) for Canon (*)
F/W readily available (Updating to the latest version confirms compatibilty.)
10-24mm F/3.5-4.5 Di II VC HLD (Model B023) for Canon SP 15-30mm F/2.8 Di VC USD G2 (Model A041) for Canon 17-35mm F/2.8-4 Di OSD (Model A037) for Canon 18-400mm F/3.5-6.3 Di II VC HLD (Model B028) for Canon SP 24-70mm F/2.8 Di VC USD G2 (Model A032) for Canon SP 35mm F/1.8 Di VC USD (Model F012) for Canon SP 45mm F/1.8 Di VC USD (Model F013) for Canon SP 70-200mm F/2.8 Di VC USD G2 (Model A025) for Canon 70-210mm F/4 Di VC USD (Model A034) for Canon SP 85mm F/1.8 Di VC USD (Model F016) for Canon SP 90mm F/2.8 Di MACRO 1:1 VC USD (Model F017) for Canon 100-400mm F/4.5-6.3 Di VC USD (Model A035) for Canon SP 150-600mm F/5-6.3 Di VC USD G2 (Model A022) for Canon SP 150-600mm F/5-6.3 Di VC USD (Model A011) for Canon(*)
Operational only in MF (No plan for new F/W.)SP AF 28-75mm F/2.8 XR DiLD Aspherical [IF] MACRO(Model A09) for Canon(*)
(*) Not supported in TAP-in Console.
[Note]a. All Canon-mount models released after in May, 2019 are compatible with EOS R and EOS RP. b. F/W updates can be performed using Tamrons TAP-in Console (sold seperately) or by visiting your local Tamron Service Center.
It seems that Canon is eventually releasing two of the “holy trinity” lenses they announced back in February 2019.
According to Nokishita the RF 24-70mm f/2.8L IS and RF 15-35mm f/2.8L IS lenses will be available for pre-order within a month.
The last “holy trinity” lens for the EOS R that’s still missing would be the RF 70-200mm f/2.8L IS, which we are pretty confident will also be released in 2019.
Prototypes or mockups of the upcoming lenses for the EOS R have been on display at CP+ 2019.
