Download

[John F]

Originally Posted by DiapDealer

Most of them should able to be. But I'm also talking about still being able to use a browser/phone/tablet to finagle my smart devices --smartly -- over my local network while the internet is down. I'm not talking about resorting to using the manual sneaker-net method. All my scheduled events fire locally (from a Home Assistant server) rather than "in the cloud" via a particular device's branded management software. Losing the internet might be a minor inconvenience for me (RE home automation), but it's still not going to force me to have to do something drastic like walk across the room to turn lights on and off. I'm not an animal.

1st world problems.

[Kindleing]

Today's article from Sophos Security illustrates a major problem with a lot of IoT devices. This one is about garage door openers, but there are many reports of similar security failures in cameras, thermostats, smart door locks and others. When vulnerabilities are discovered, most IoT vendors make no effort to mitigate them. These are cheap devices that were never designed with security in mind and there is no budget for retrofits.

Many times access passwords are embedded in these devices that are not removable. These "secret" passwords find their way to the Internet for random people to take advantage of insecure devices. There are automated search programs constantly scanning the Internet looking for compromised devices.

A big issue is when someone can hack into your smart light switch, it isn't turning on/off lights that is the problem - the problem is that light switch gives them a toe-hold to leverage their way into the rest of your home network. Then your main computer with all its documents, photos and family memories gets an unhealthy dose of ransom-ware shortly after they plunder your passwords and financial details.

https://nakedsecurity.sophos.com/202...r-garage-door/

There are steps that can be taken to mitigate the danger, but many people who buy these devices don't have the technical background to even know there is a problem.

[ownedbycats]

There's a search engine called, uh, Shodan (fans of '90s CRPGs may recognize that name) that can be used to find various devices accessible via the internet. From the wikipedia article:

In May 2013, CNN Money released an article detailing how Shodan can be used to find vulnerable systems on the Internet, including traffic light controls. They show screenshots of those systems, which provided the warning banner "DEATH MAY OCCUR !!!" upon connecting.[7]

In September 2013, Shodan was referenced in a Forbes article claiming it was used in order to find the security flaws in TRENDnet security cameras.[8] The next day, Forbes followed up with a second article talking about the types of things that can be found using Shodan. This included Caterpillar trucks whose onboard monitoring systems were accessible, heating and security control systems for banks, universities, and corporate giants, surveillance cameras, and fetal heart monitors.[9]

In December 2015, various news outlets, including Ars Technica, reported that a security researcher used Shodan to identify accessible MongoDB databases on thousands of systems, including one hosted by Kromtech, the developer of the macOS security tool MacKeeper.[10]

In November 2021, PCMagazine described how Shodan was used by AT&T to detect Internet of Things devices infected with malware.[11]

[DiapDealer]

I don't consider "dumb" garage doors to be very secure to begin with. And In my case, the unlocked man door would probably be more attractive to thieves than my home made IoT garage door opener.

The "security" of my IoT automation stuff is of very little concern to me. Any sense that one was more secure before using IoT and less secure after, is mostly illusory (not to mention academic). If thieves/criminals target you, a dearth of internet connected devices will not cause them to pass you by. Glass still breaks, locks still get smashed, and doors still get jimmied.

And as far as toeholds into home networking... the WiFi router itself would be a far more attractive (and fairly well documented) point of failure. Especially for any competent gang of professional home hackers who've set up shop in your neighborhood.

[ZodWallop]

Originally Posted by ownedbycats

There's a search engine called, uh, Shodan (fans of '90s CRPGs may recognize that name) that can be used to find various devices accessible via the internet. From the wikipedia article:

Wait, so SHODAN is now helping people? How times have changed...

[ownedbycats]

Originally Posted by ZodWallop

Wait, so SHODAN is now helping people? How times have changed...

Ha! Or perhaps this is before the Hacker removed her ethical restraints...

(I seem to remember that the guy who made the search engine was into games )

[ZodWallop]

Originally Posted by ownedbycats

Ha! Or perhaps this is before the Hacker removed her ethical restraints...

Touché!

[John F]

"Nest Secure and Dropcam products will stop working in April 2024"

https://www.engadget.com/nest-secure...1.html?src=rss