To look up security cameras (or Wi-Fi baby monitors or smart TVs or routers), all hackers have to do is go to Shodan. IoT devices are connected to the internet, and as a result each has an IP address, a string of numbers that identifies the device and serves as its specific address on the net. IP addresses are public information, which anyone can index on a search engine, not just Shodan, Google or Bing. The creators of Shodan and similar search tools say their goal is to help good-guy researchers. Security experts say the good guys need to be able to see as much as the bad guys can in order to be effective.