More About The Security Flaw In Canon’s WiFi Transfer Protocol

Security Flaw

Canon yesterday issued security advisory concerning a security flaw in their Picture Transfer Protocol, the WiFi transfer protocol used on Canon cameras.

The security flaw was demonstrated by Israeli security company Check Point Research during DEF CON 2019. The security researchers were able to hijack a Canon EOS 80D using USB and wirelessly using WIFI.

The discovered vulnerabilities would allow a malicious actor to take over a target’s DSLR camera through both WiFi and USB, giving him full control over it. Such an infection could, for example, be used for installing a Ransomware on the camera, and demanding ransom for both the images and the camera itself. Not a nice scenario for professionals.

As LensVid sums it up:

An attacker who would want to use a similar approach to perform a real-world ransomware attack on a EOS 80D will need to set-up a rogue WiFi Access Point and initiate the exploit (something that can certainly be done by many sufficiently experienced attackers although will require the Camera’s WIFI to be turned on).

The video below shows how Check Point Research exploited the Canon EOS 80D using the cited security flaw. By building on existing knowledge of Magic Lantern, they were able to build a ransomware.

All the steps involved in exploiting the security flaw in Canon’s WiFi transfer protocol are documented in this technical article.

Check Point Research promptly informed Canon. While waiting for the firmware updates, Canon recommends the following:

  • Ensure the suitability of security-related settings of the devices connected to the camera, such as the PC, mobile device, and router being used.
  • Do not connect the camera to a PC or mobile device that is being used in an unsecure network, such as in a free Wi-Fi environment.
  • Do not connect the camera to a PC or mobile device that is potentially exposed to virus infections.
  • Disable the camera’s network functions when they are not being used.
  • Download the official firmware from Canon’s website when performing a camera firmware update.

Canon already issued a firmware update for the Canon EOS 80D, and more updates will follow.

Unfortunately, that’s not the end of the story. The researchers found multiple critical vulnerabilities in Canon’s Picture Transfer Protocol. And it’s likely these vulnerabilities are present in other manufacture’s PTP as well.

Stay tuned.

[via LensVid]

Is It Possible To Tell The Difference Between f/1.4 and f/1.8 Lenses, Besides The Money You Spend

F/1.4

Is it possible to spot a difference between an f/1.4 and and f/1.8 lens? Can you tell the difference?

These questions are tackled by Pierre T. Lambert in the short video below. Given the substantial price difference between f/1.8 and f/1.4 lenses, it’s time to see if an f/1.4 lens is worth your hard earned money.

Canon Announces New 120MP High Resolution and 2,7MP High Sensitivity Sensors

Sensors

More Canon sensor announcements. These sensors are highly specialised devices, not to be featured in you standard DSLR.

Press release:

Canon U.S.A. Announces New 120 MP Ultra-High Resolution and 2.7 MP Ultra-High Sensitivity CMOS Sensors

MELVILLE, NY, June 20, 2019 – As image sensors are a driving force in innovating industries, Canon U.S.A., Inc., a leader in digital imaging solutions, is pleased to announce two new CMOS (complementary metal-oxide semiconductors) sensor products, the ultra-high resolution 120MXSI and ultra-high sensitivity 35MMFHDXSMA. These sensors help expand the company’s lineup of industrial vision products, and offer integrators and end users additional capabilities when developing solutions in a variety of applications1.

“As a result of Canon’s success in developing and manufacturing advanced CMOS sensors for our own purposes, we expanded to create a business platform offering select sensor capabilities for use in industrial vision applications,” said Kazuto Ogawa, president and chief operating officer, Canon U.S.A., Inc. “These two new CMOS sensors reflect Canon’s dedication to this new business, and reinforce our commitment to developing high-quality imaging solutions.” 

120MXSI

The 120MXSI sensor is built with the ability to produce clear, high-quality images, making it a great fit for integrators and end users developing applications such as machine vision, security, robotics, precision agriculture and healthcare. This 120-megapixel sensor is capable of simultaneous and discrete image capture in both the visible and near-infrared spectrumsat a maximum frame rate of 9.4 frames per second. 

35MMFHDXSMA

The 35MMFHDXSMA sensor is capable of capturing monochrome imagery in extreme low-light environments where subjects would be near impossible to recognize with the naked eye. Removal of the color filter array doubles the sensitivity of the previously announced 35MMFHDXSCA sensor, providing even greater low-light capabilities. This sensor can meet a wide range of ultra-high-sensitivity needs when used as a component to support a multitude of applications developed by integrators and end users, including astrological observation, natural disaster monitoring, security and object detection, molecular and cell biology, and industrial vision. 

The 120MXSI and 35MMFHDXSMA CMOS sensors will be showcased in the Canon Booth #1611 at the Sensors Expo & Conference, which, according to its organizer, is the industry’s largest event dedicated to sensors, connectivity and IoT, taking place from June 26-27, 2019 at the San Jose McEnergy Convention Center in San Jose, California.

For more information on Canon sensors, please visit canon-cmos-sensors.com.

Canon Develops A New CMOS Sensor With High Dynamic Range and Able To Shoot Images In Harsh Settings

Ibis Canon Rumors Canon Full Frame Mirrorless Canon PowerShot G7 X Canon Eos 90d

Canon press release:

Canon Announces Development of New CMOS Sensor with High Dynamic Range and Ability to Capture Images Under Harsh Conditions

MELVILLE, NY, June 20, 2019 – The high demands of complex lighting and harsh environments require sensors capable of delivering high-dynamic range (HDR) and high-image quality in adverse temperature conditions. To answer this application need, Canon U.S.A. Inc., a leader in digital imaging solutions, is pleased to announce that its parent company Canon Inc. is pursuing development of the 3U3MRXSAAC, a 2.8-megapixel, 1/2.32-inch CMOS sensor ideal for HDR imaging.

“As Canon evolves in the sensor market, we are dedicated to utilizing our expertise to develop products built to meet current growing market trends,” said Kazuto Ogawa, president and chief operating officer, Canon U.S.A., Inc. “The 3U3MRXSAAC CMOS sensor under development reflects the continuation of our business strategy that leverages the high-quality imaging technology Canon is able to achieve.”

The 3U3MRXSAAC CMOS sensor being developed will be equipped with an HDR drive function that can achieve a wide range of 120 dB at low noise levels. This HDR function will reflect a greater ability to extract usable information even when there is a substantial difference between the lightest and darkest parts of an image. Even during normal drive operation, the sensor can achieve a dynamic range of 75 dB—greater than the sensors on many conventional digital cameras. 

Additionally, the 3U3MRXSAAC CMOS sensor will also be capable of operating in environments with extreme temperatures ranging from -40 degrees Celsius to 105 degrees Celsius. Typically, in high-temperature conditions, the increase in dark current noise (noise that occurs due to heat, even when no light reaches the sensor) can affect the quality of the image. However, the 3U3MRXSAAC CMOS sensor will be equipped with functionality that helps correct black levels (the luminance level of the darkest portion of an image) in real-time to help maintain high image quality. 

With a diagonal size of 1/2.32 inches (7.75 mm), the 3U3MRXSAAC CMOS sensor will feature approximately 2.8 million effective pixels (1936 x 1456), a pixel size of 3.2 μm x 3.2 μm and a frame rate of up to 60 fps (30 fps during HDR drive operation). The sensor will be compatible with the MIPI CSI-2 interface used by consumer-oriented cameras for a wide variety of purposes.

For more information on Canon sensors, please visit canon-cmos-sensors.com.

Canon RF Lens Technology Explained

Canon Rf

Neat, short video by Canon Imaging Plaza introducing the innovative features of Canon RF lenses and how they open up new possibilities in photographic expression.

Canon RF lenses:

Asia & Australia: AliExpress, Amazon JAPAN, Amazon CHINA, Amazon INDIA, Amazon AU, Amazon USA, Digitalrev, Adorama, B&H Photo, eBay Australia, Rakuten JP
Europe & UK: Amazon DE, Amazon UK, Amazon FR, Amazon IT, DigitalRev, eBay DE, Wex Photo Video, Park Cameras, Canon DE, Canon UK, Canon IT, Canon FR
USA/Canada: Amazon USA, Amazon CA, B&H Photo, Adorama, Digitalrev, KEH Camera, eBay US, Canon USA, Canon CA, BestBuy

Canon EOS R full frame mirrorless system:

Asia & Australia: AliExpress, Amazon JAPAN, Amazon CHINA, Amazon INDIA, Amazon AU, Amazon USA, Digitalrev, Adorama, B&H Photo, eBay Australia, Rakuten JP
Europe & UK: Amazon DE, Amazon UK, Amazon FR, Amazon IT, DigitalRev, eBay DE, Wex Photo Video, Park Cameras, Canon DE, Canon UK, Canon IT, Canon FR
USA/Canada: Amazon USA, Amazon CA, B&H Photo, Adorama, Digitalrev, KEH Camera, eBay US, Canon USA, Canon CA, BestBuy