Finding these devices via a search engine highlights a massive gap in IoT (Internet of Things) security.
The web interface served by these devices often includes indexframe.shtml as part of its navigation frame structure. If the device is not password-protected or is using default credentials, anyone with the URL can view live camera feeds, pan-tilt-zoom (PTZ) controls, and even change system settings. Finding these devices via a search engine highlights
Ethics and safety