• The Internet of Things is laughably insecure
    105 replies, posted
[quote] Shodan, a search engine for the Internet of Things (IoT), recently launched a new section that lets users easily browse vulnerable webcams. The feed includes images of marijuana plantations, back rooms of banks, children, kitchens, living rooms, garages, front gardens, back gardens, ski slopes, swimming pools, colleges and schools, laboratories, and cash register cameras in retail stores, according to [URL="https://twitter.com/viss"]Dan Tentler[/URL], a security researcher who has spent several years investigating webcam security. "It's all over the place," he told Ars Technica UK. "Practically everything you can think of." We did a quick search and turned up some alarming results:[/quote] sauce : [url]http://arstechnica.com/security/2016/01/how-to-search-the-internet-of-things-for-photos-of-sleeping-babies/[/url] If you don't know what the internet of things is: [quote]The [B]Internet of Things[/B] (IoT) is the network of physical objects, devices, vehicles, buildings and other items which are embedded with electronics, software, sensors, and network connectivity, which enables these objects to collect and exchange data.[/quote] Or in super layman's terms, it's connecting shit like security cameras, fridges, cars, etc. to the internet. Many people fail to take security precautions, which sometimes leads to amusing situations. I remember a 4chan thread where a guy managed to access to school security camera and began to play music and other sound bits to a very confused class for example.
i know, lets make that stuff less secure by preventing people from encrypting them!
[QUOTE=thelurker1234;49592142]sauce : [url]http://arstechnica.com/security/2016/01/how-to-search-the-internet-of-things-for-photos-of-sleeping-babies/[/url] If you don't know what the internet of things is: Or in super layman's terms, it's connecting shit like security cameras, fridges, cars, etc. to the internet. Many people fail to take security precautions, which sometimes leads to amusing situations. I remember a 4chan thread where a guy managed to access to school security camera and began to play music and other sound bits to a very confused class for example.[/QUOTE] I, like, REALLY hate this new shitty Internet of Things gimmick. The devices are so insecure, it almost would make me feel like my privacy is invaded. Will I have to buy a doorbell from 1990 to not get hacked in five minutes? If the security was vastly improved, I wouldn't mind. But right now, these things really need to get their security act together. :ohno:
[QUOTE=Amiga OS;49592201][video=youtube;8mzBS0DXxnc]https://www.youtube.com/watch?v=8mzBS0DXxnc[/video] School ipcam in question. Fast forward to an hour in.[/QUOTE] Not the exact video I was talking about, but yeah, there's tons of these videos out there. They're quite amusing as long as they're like this, where they overall aren't that harmful (and are probably fixed by the IT department after). Sometimes people use these exploits for malicious shit unfortunately. [QUOTE=brushtool;49592208]I, like, REALLY hate this new shitty Internet of Things gimmick. The devices are so insecure, it almost would make me feel like my privacy is invaded. Will I have to buy a doorbell from 1990 to not get hacked in five minutes? If the security was vastly improved, I wouldn't mind. But right now, these things really need to get their security act together. :ohno:[/QUOTE] Some of it is pretty neat, such as having the thermostat not cool your house while you're away, or using your fridge to keep track of what you need to buy and then emailing it to myself when at the store, but I'd probably be more interested in DIYing it myself.
I don't see the point in having things like coffee makers or refrigerators hooked up to the internet. The only thing I would want hooked up to the internet would be the thermostat so I can turn on the heater on my way home to come to a warm house but that could easily be solved just by making it programmable and have it turn on at a specific time
I agree to all of these posts, but I can't click agree yet. Gotta post some more posts
[QUOTE=brushtool;49592296]I agree to all of these posts, but I can't click agree yet. Gotta post some more posts[/QUOTE] You can't rate anything other than star in SH now, even if you get your 50 posts or whatever the number is
[QUOTE=Dr.C;49592242]I don't see the point in having things like coffee makers or refrigerators hooked up to the internet. The only thing I would want hooked up to the internet would be the thermostat so I can turn on the heater on my way home to come to a warm house but that could easily be solved just by making it programmable and have it turn on at a specific time[/QUOTE] The big problem is with the security cameras, since people have legitimate reasons to remotely monitor their homes over the internet
[QUOTE=thelurker1234;49592303]You can't rate anything other than star in SH now, even if you get your 50 posts or whatever the number is[/QUOTE] Crud [editline]23rd January 2016[/editline] [QUOTE=brushtool;49592364]Crud[/QUOTE] Hey, at least that's just for sensational headlines
[QUOTE=Lolkork;49592311]How soon until someone dies because their pacemaker got hacked.[/QUOTE] My grandpa had a pacemaker that was hooked to the house through a little wifi box thing. It was so that some hospital/monitoring place could tell if he was having a heart attack remotely or something to that effect.
[QUOTE=thelurker1234;49592303]You can't rate anything other than star in SH now, even if you get your 50 posts or whatever the number is[/QUOTE] People with at least 10000 posts should be allowed to rate whatever they want so people start taking our ratings as fact "Even the 10k Elite think you're wrong"
[QUOTE=Amiga OS;49592201][video=youtube;8mzBS0DXxnc]https://www.youtube.com/watch?v=8mzBS0DXxnc[/video] School ipcam in question. Fast forward to an hour in.[/QUOTE] I remember this instead of doing something creative all he does is scream like a complete retard and play really faggy music what a terrible waste of a good opportunity
[QUOTE=OvB;49592415]My grandpa had a pacemaker that was hooked to the house through a little wifi box thing. It was so that some hospital/monitoring place could tell if he was having a heart attack remotely or something to that effect.[/QUOTE] I wonder if it had controls via wifi as well, if it did and it was a medical regulation pacemaker I would assume those kinda actions would be well secured. [QUOTE]The cameras are vulnerable because they use the Real Time Streaming Protocol (RTSP, port 554) to share video but have no password authentication in place. The image feed is available to paid Shodan members at images.shodan.io. Free Shodan accounts can also search using the filter port:554 has_screenshot:true. Shodan crawls the Internet at random looking for IP addresses with open ports. If an open port lacks authentication and streams a video feed, the new script takes a snap and moves on. While the privacy implications here are obvious, Shodan’s new image feed also highlights the pathetic state of IoT security, and raises questions about what we are going to do to fix the problem.[/QUOTE] -from the sauce So the author of the article came to the conclusion that because lots of people forget to turn on passwords for their internet cameras, somehow the entire IoT has poor security?
I really just hate the "Internet of Things" term. God fucking damn it, I imagine some fucking blithering retard just ran into some marketing department meeting and that is the one goddamn thing they caught on to amid all the other nonsensical bullshit he was rambling on about. Or it sounds like some stupid goddamn gimmick at some tech presentation, trying to sell this tablet skateboard and how it could enable "an internet of... things!" It just sounds [I]so fucking stupid.[/I] FUCK.
[QUOTE=thelurker1234;49592234] Some of it is pretty neat, such as having the thermostat not cool your house while you're away, or using your fridge to keep track of what you need to buy and then emailing it to myself when at the store, but I'd probably be more interested in DIYing it myself.[/QUOTE] ya but the problem is these devices are designed to be completely reliant on an external internet connection, but the tasks they do don't really require them to be connected to the internet. its a massive failure on devicemakers to be interconnected, everybody wants to be the hub, wireless routers would have gone that route too if engineers hadn't standardized
[QUOTE=cody8295;49592471]I wonder if it had controls via wifi as well, if it did and it was a medical regulation pacemaker I would assume those kinda actions would be well secured. -from the sauce So the author of the article came to the conclusion that because lots of people forget to turn on passwords for their internet cameras, somehow the entire IoT has poor security?[/QUOTE] It's like someone in the 80s complaining that computers were an insecure way to store documents compared to putting hard copies in a locked vault, because people didn't set passwords for their servers.
[QUOTE=OvB;49592415]My grandpa had a pacemaker that was hooked to the house through a little wifi box thing. It was so that some hospital/monitoring place could tell if he was having a heart attack remotely or something to that effect.[/QUOTE] I'm sure that the pacemaker was only transmitting and not receiving, right? Not much you could hack there. [editline]23rd January 2016[/editline] I don't understand why webcams are so hard to secure.
[QUOTE=brushtool;49592208]I, like, REALLY hate this new shitty Internet of Things gimmick. The devices are so insecure, it almost would make me feel like my privacy is invaded. Will I have to buy a doorbell from 1990 to not get hacked in five minutes? If the security was vastly improved, I wouldn't mind. But right now, these things really need to get their security act together. :ohno:[/QUOTE] If you buy things from a reputable company and are at least slightly computer literate you will probably be okay. A lot of issues come from leaving devices with a default password or what not. The Internet of Things is good for some things like cars, thermostats, security cameras and smoke alarms. Refrigerators and coffee makers maybe not so much.
I don't get this article. I've only ever seen "the internet of things" as a blanket term covering DiY projects and Google Nest thermostats and other such devices. How does one get off calling everything "insecure"? [editline]23rd January 2016[/editline] And those unprotected webcams have been up for ages. Are we just bumping them into this new category now?
[QUOTE=JumpinJackFlash;49592476]I really just hate the "Internet of Things" term. God fucking damn it, I imagine some fucking blithering retard just ran into some marketing department meeting and that is the one goddamn thing they caught on to amid all the other nonsensical bullshit he was rambling on about. Or it sounds like some stupid goddamn gimmick at some tech presentation, trying to sell this tablet skateboard and how it could enable "an internet of... things!" It just sounds [I]so fucking stupid.[/I] FUCK.[/QUOTE] what do you recommend?
[QUOTE=Scot;49592569]what do you recommend?[/QUOTE]"I hooked my smoke alarm up to the internet so I can freak out my dogs when I'm not home." There does not need to be a term to specifically describe linking dildos and coffee machines up to "the net." If you really want to say that, then say that, "I gave my x an internet connection, I can control it to do y things from [I]anywhere!"[/I]
[QUOTE=JumpinJackFlash;49592621]"I hooked my smoke alarm up to the internet so I can freak out my dogs when I'm not home." There does not need to be a term to specifically describe linking dildos and coffee machines up to "the net." If you really want to say that, then say that, "I gave my x an internet connection, I can control it to do y things from [I]anywhere!"[/I][/QUOTE] Saying "Internet of Things" is a pretty good description of connecting random things to the internet, and it's becoming more common for a reason. I'm seeing these articles pop up more and more, and for good reason. "Things" randomly being hooked up to the internet without security can enable bad stuff. It's a legitimate concern. You're suggesting using more words for... what? What's wrong with the shorter phrase?
[QUOTE=Scot;49592569]what do you recommend?[/QUOTE] I recommend not building an internet of things, it's a fundamentally atrocious idea
so like what the fuck is an IoT? an internet based linking together of physical objects? I know it's in the OP but it just sounds absurd? Why is it called the "INTERNET OF THINGS" what's the point of the term?
[QUOTE=J!NX;49592651]so like what the fuck is an IoT? an internet based linking together of physical objects?[/QUOTE] Yeah. Fridges, toys, clocks, webcams, and other stuff are starting to be hooked up to the internet without security.
[QUOTE=JumpinJackFlash;49592621]"I hooked my smoke alarm up to the internet so I can freak out my dogs when I'm not home." There does not need to be a term to specifically describe linking dildos and coffee machines up to "the net." If you really want to say that, then say that, "I gave my x an internet connection, I can control it to do y things from [I]anywhere!"[/I][/QUOTE] so your suggestion is to not give a name at all to a new category of devices cool [editline]23rd January 2016[/editline] [QUOTE=J!NX;49592651]so like what the fuck is an IoT? an internet based linking together of physical objects? I know it's in the OP but it just sounds absurd? Why is it called the "INTERNET OF THINGS" what's the point of the term?[/QUOTE] Embedded systems connected to the internet, basically.
[QUOTE=Morgen;49592518] The Internet of Things is good for some things like [b]cars[/b], thermostats, security cameras and smoke alarms. Refrigerators and coffee makers maybe not so much.[/QUOTE] Unless you're cool with planned obsolesce (and the glaring security issues that your car manufacturer will now not fix because it's too old), this is really not the case.
[QUOTE=JumpinJackFlash;49592621]"I hooked my smoke alarm up to the internet so I can freak out my dogs when I'm not home." There does not need to be a term to specifically describe linking dildos and coffee machines up to "the net." If you really want to say that, then say that, "I gave my x an internet connection, I can control it to do y things from [I]anywhere!"[/I][/QUOTE] Yeah, I'll just carefully explain that I have connected appliances and devices within my home to the world wide web in order to access them remotely via cable or fiber optic link every single time I refer to the concept instead of using a perfectly valid term that makes you personally angry for no real reason.
[QUOTE=J!NX;49592460]I remember this instead of doing something creative all he does is scream like a complete retard and play really faggy music what a terrible waste of a good opportunity[/QUOTE] well it was a special ed class..
[QUOTE=Dr.C;49592433]People with at least 10000 posts should be allowed to rate whatever they want so people start taking our ratings as fact "Even the 10k Elite think you're wrong"[/QUOTE] Yeah, but then people would shitpost to get their count up to be a part of that "10k Elite".
Sorry, you need to Log In to post a reply to this thread.