More About Canon DSLR WiFi Issue (Security & Privacy)

Canon DSLR WiFi Issue

A few weeks ago we reported about an issue all WiFi-enabled Canon cameras have. The WiFi issue could allow someone to steal photos from your camera, or let hackers upload images on the camera. But most scaring: one could get in control of you camera and use as a spy camera (through Live View mode).

German security researcher Daniel Mende discussed the issue again at the Hack in the Box security conference in Amsterdam, again using the Canon EOS-1D X (price & specs) to exemplify the problem. According to Mende the WiFi implementation Canon featured on the EOS-1D X was not designed with security in mind:

If a photographer uses an insecure network like a hotel Wi-Fi network or a Starbucks network, than almost anybody with a little bit of knowledge is able to download images from the camera

Attackers could access the camera in various ways. For instance, when using the FTP upload mode everything is send over the network in clear text (credentials inclusive). Sniffing data is made easy, and pictures that are uploaded can be extracted from the network traffic. Moreover, the cam has an DNLA (Digital Living Network Alliance) mode for sharing pictures and videos between devices without requiring authentication:

In this mode, the camera fires up like a network server […] In this mode, it is also not hard to get your fingers on the footage, you just have to browse to the camera and download all images you like.

The camera also has a built-in web server that does require authentication, but the method uses a 4-byte session ID cookie that can easily be overcome using a brute force attack (using a 6 lines Python script):

Checking all IDs takes about 20 minutes because the web server is not that responsive […] You could for instance make yourself the author of a photo. That would come in handy when you try to sell them

One could also get access to the EOS Utility Mode, hence remotely controlling the camera through the Canon EOS Utility software. If you consider that the software provides Live View functionality, you may easily figure out what it means. Mende says that Canon was not yet willing to listen to him:

The camera is designed to work exactly like this. From Canon’s point of view, there is probably no bug

Daniel Mende’s full presentation, with all the technical details can be seen here.

Canon EOS-1D X price check: B&H Photo, Adorama, Amazon USA, Amazon Canada, Canon Canada, Canon USA

[via PCWorld]

Canon Announces EOS M With New Color Option (Bayblue)

EOS M With New Color

Canon Japan announced a new, fifth color option for the Canon EOS M mirrorless camera. Starting April 25th the EOS M will be avaible in the “bayblue” color option. The launch comes with a special event, called “EOS M Photographic Journey”, with guest talks, showcases etc. The color was created by Japanese art director Chie Morimoto and is inspired by “Travel”.

Canon EOS M core specs:

  • 18.0 MP CMOS (APS-C) Sensor
  • DIGIC 5 Image Processor
  • Full HD 1080p Movie with Focus Tracking
  • 3.0″ Touch Screen LCD with 1040K-dots
  • Touch AF and Multi-touch Operation
  • Hybrid CMOS Auto-focus for Photo & Video
  • Compatible with Canon EF and EF-S Lenses
  • ISO 100-12800, Expandable to 25600 (H)
  • Canon’s First Mirrorless Camera

The EOS M with the EF-M 22mm f/2 STM pancake lens is currently on sale for $549. Canon EOS M price check: B&H Photo, Adorama, Amazon USA, Amazon Canada, Canon Canada, Canon USA

EOS M With New Color

EOS M With New Color

[via dslcamera]

EU Deal: Canon EF 24-105mm f/4L IS Eur 800 (eBay Germany)

Very good deal by top rated seller foto-mundus (>42000 ratings, 99.8% positive) on eBay Germany: The Canon EF 24-105 f/4L IS USM lens is on sale for Eur 799.99 . Free shipping and original German Canon warranty. Very good deal considering that the EF 24-105 is usually sold for Eur 929.

photozone.de about the EF 24-105mm:

Regarding its equivalent zoom range (39-168mm) on an APS-C DSLR the Canon EF 24-105mm f/4 USM L IS may not be the most sexy lens here but its performance figures are very impressive nonetheless. In fact the resolution results beat those from the EF 24-70mm f/2.8 USM L and match the EF 28-70mm f/2.8 USM L with its much more conservative zoom range (but higher speed). There’s a slight decrease in performance at 105mm but even here the quality remains on a very high level. As to be expected from a modern Canon L lens the construction quality is up to pro standards matching its fasters cousins. The lower price tag plus the extra IS should compensate the slightly more moderate max. aperture for most users. Is it a perfect lens then ? Well, there’re also downsides like pronounced barrel distortions and higher than expected CAs at the wide-end of the zoom range. However, the package remains extremely attractive if you can live with the rather unattractive zoom range on an APS-C DSLR – similar to other 28-xx or 24-xx zooms this lens is really more meant for 1.3x or FF (D)SLRs.

Canon DSLR Simulator Teaches How To Shoot

Canon DSLR Simulator

Canon Canada started a website with an interactive DSLR simulator, named Outside of Auto. The “Auto” refers to the Auto-mode on Canon DSLRs. While Canon is stating that their DSLR shot excellent pics in Auto-mode, they also suggest that the real fun starts when using the creative modes, i.e. when learning to use exposure and aperture in the right way.

The website offers three sections to play along: Learn, Play and Challenge. This is intended as a progression: You first learn the basics, then you play around with what you learned, and finally you can test yourself.

Canon DSLR Simulator

The “Learn” section has three sub-sections: Home, Photography 101, and Tips. The “Play” section offers a virtual environment where you can try out what you learned in “Learn” section. All camera settings are available. The “Challenge” section gives you the opportunity to test what you have learned against the clock. Six different shooting scenarios can be tried out.

Have fun with this Canon DSLR simulator! :-)

Canon DSLR Simulator

[via PetaPixel]

Deal: Canon PowerShot SX500 For $193

PowerShot SX500

Adorama has the Canon PowerShot SX500 IS at a special price. After entering coupon code S2299500 you pay $193.33 (click here) instead of $249. The deal expires 04/15/2013.

  • 30x optical zoom lens starts at 24mm
  • 16MP CMOS sensor
  • 720p HD Video
  • 3-inch, 461k dot LCD monitor
  • Smart Auto with 32 predefined shooting situations
  • Intelligent IS with 6 image stabilization modes
  • Zoom Framing Assist tracks and captures moving subjects
  • High-Speed AF