The issue of hidden cameras and baby monitors

I came across a report by İbrahim Haskoloğlu. First of all, I would like to congratulate him. He is conducting excellent research. The topic he addresses this time is a much larger problem revolving around hidden cameras and baby monitors.

Sometimes a news story does not just describe a crime; it reveals the existence of a system. This file points exactly to such a point. The issue, which at first glance looks like a “hidden camera scandal,” is actually part of a much broader structure. Rather than individual deviants, there is an organized structure that produces content and markets it.

According to what is described, the issue is not limited to hidden cameras placed in hotel rooms or daily rental houses. The footage is collected, archived, and sold by turning it into a “product.” Moreover, these locations are spread across a much wider spectrum than we might think: hair removal centers, stores, bridal shops, and even breast milk pumping centers.

The part up to here is already frightening enough. But the real breaking point is elsewhere.

Because this system does not work only by placing hidden cameras. It also has a much “cleaner” source: the inside of homes.

Wi-Fi connected baby monitors…

These devices, which families place in their homes to monitor their children, can actually turn into broadcast sources open to the outside. Passwords are cracked, devices with unchanged default settings are accessed, and people's most intimate moments are recorded. Moreover, this is not just a theoretical risk; it is a systematically conducted activity.

Even more remarkable is that this footage does not circulate randomly. It is collected in a pool, marketed on platforms like Telegram, the first few seconds are shared as a “preview,” and money is demanded for access to the full version. This is more of a content economy than a classic hacking case.

Another element that stands out in the screenshots is the payment systems. Expressions such as IBANs constantly changing and payments being deferred to the next day suggest that this business is not run only by anonymous individuals, but likely through a more organized structure that also uses accounts belonging to others. At this point, the subject intersects not only with cybercrime but also with financial crimes.

There is another important detail. There is a search engine where such camera footage has been indexed for years: Shodan. Shodan is a system that scans devices open to the internet. Misconfigured cameras, open ports, and passwordless access can be listed here. In other words, in some cases, you don't even need to “hack” a device; the device is already standing out in the open.

Therefore, the issue has gone beyond the narrative of “malicious hackers.” The problem is the incorrect installation, lack of updates, and lack of oversight of technology.

What the State Must Do

Such incidents cannot be treated as isolated cases. IoT devices entering Turkey, especially baby monitors, must undergo cybersecurity tests. Not only physical security but also software security must be made mandatory.

The sale of devices operating with default passwords should not be allowed.

Manufacturers must be required to provide regular security updates.

A central vulnerability database should be created for actively used devices.

The capacity of law enforcement agencies to combat this type of digital content trade should be increased.

What Camera Owners Must Do

The truth is: We are the ones who bring these devices into our homes.

The default username and password must be changed.

Device software must be updated regularly.

Features that open automatic access, such as UPNP, should be turned off.

Cameras should be operated on a separate network if possible.

Otherwise, the camera ceases to be a security tool and turns into a broadcasting device.

Accommodation and Public Spaces

Not staying in insecure hotels, motels, or daily rental places is no longer a preference, but a necessity. However, the issue does not end there. Years ago, there were cases where a well-known hotel's wireless network was cloned from an apartment rented near the hotel, and users' traffic was eavesdropped on.

Therefore:

Be careful when connecting to open Wi-Fi networks.

Sensitive transactions should be performed via mobile data if possible.

Be wary of suspicious devices in physical environments.

Every device that enters the home today is actually a door opening to the outside. The key to this door is often not in our hands.

In Brief

Google has released Gemma 4, a mobile AI model that works without the internet.

AI is constantly renewing itself. I couldn't install Gemma 4 on my iPhone, so I couldn't check it out, but I am seriously curious.

Claude can now control computers from the command line.

Claude is now at a completely different point. If these types of developments continue, first AIs will use software, and then the concept of software will lose its current meaning.

Netflix has released an open-source AI model that can erase objects from videos.

It is very interesting that Netflix wants to enter the AI race. Although, who could stay away? Nvidia is working with developers, and Apple is reportedly retraining its Siri team.

Anthropic has detected patterns in Claude that correspond to concepts like stress and hesitation.

Anthropic's constant monitoring of Claude is tremendous. Especially the work on the reverse engineering side is remarkable. Now, their analysis of patterns like stress and hesitation is another level. By the way, Claude's design also looks really successful.

OpenAI has received 122 billion dollars in investment.

If I am not mistaken, the AI investment announced across the country during the Trump era was around 500 billion dollars. It seems that about a quarter of this is going to OpenAI as investment. On the other hand, the need Sam Altman announced to the WSJ is at the 7 trillion dollar level. This scale shows that the issue is no longer a technology race but an infrastructure race.

ChatGPT continues to be integrated into automobiles.

ChatGPT has come to CarPlay. Now the need to use it with Siri via WhatsApp has disappeared. This simplification is quite positive in terms of user experience.

Oracle laid off approximately 30,000 employees with a single email.

Oracle and many technology companies have continued to lay off staff recently. I was going to write about it last week, but when I saw the 30,000 figure, I felt the need to check it specifically.

Except for Elon Musk, the entire founding team at xAI has left.

I suppose we will see more artificial intelligence and fewer humans from now on.

OpenAI has acquired the technology publishing network TBPN.

Turkish developers who heard this immediately started making their own new examples. But the real question is: Will these really be necessary in the new world?