If you do a google search for
all the hits will be for remote-controlled web-cams. Almost all of them are for public places, and most are not password protected. I found out about this in the comments following up on a March 18 entry on Bruce Schneier's weblog.