Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Sun 15 Dec 2019, 20:20
All times are UTC - 4
 Forum index » Off-Topic Area » Security
IoT Insecurity: Pinpointing the Problems
Post new topic   Reply to topic View previous topic :: View next topic
Page 1 of 1 [11 Posts]  
Author Message
labbe5

Joined: 13 Nov 2013
Posts: 2084
Location: Canada

PostPosted: Fri 22 Jul 2016, 14:26    Post subject:  IoT Insecurity: Pinpointing the Problems  

https://threatpost.com/iot-insecurity-pinpointing-the-problems/119389/

Reading this article, you will understand the challenge facing security experts for IoT to be successful and without risk for users.

More and more devices are connected to Internet, which are unsecured by design, for convenience.
Back to top
View user's profile Send private message 
gcmartin

Joined: 14 Oct 2005
Posts: 6730
Location: Earth

PostPosted: Fri 22 Jul 2016, 15:04    Post subject:  

Some/many of the articles points are points that PUP members, many advance members, take issue with. We have seen it in regards to mere cell phones. Some members are upset by automatic updates while others are fine with it. There's other points, too.

I am not sure if we are ever going to get to point free of any insecurity.

"And the beat goes on!" A song from the 60s

_________________
Get ACTIVE Create Circles; Do those good things which benefit people's needs!
We are all related ... Its time to show that we know this!
3 Different Puppy Search Engines or use DogPile
Back to top
View user's profile Send private message 
labbe5

Joined: 13 Nov 2013
Posts: 2084
Location: Canada

PostPosted: Mon 02 Dec 2019, 17:41    Post subject: Smart TVs
Subject description: The Cyberthreat Lurking in Your Living Room
 

https://threatpost.com/smart-tvs-cyberthreat-living-room-feds/150713/

TV takeover, privacy threats, botnet concerns and Wi-Fi network compromise are all big concerns when it comes to connected TVs.
Black Friday and Cyber Monday sales of smart TVs are likely prodigious this Thanksgiving weekend – but consumers need to be aware of the hole they can punch in home cyber-defenses.
That’s the word from the FBI, which warned that smart TVs, which hook up to the internet to allow users to access apps and stream Netflix and other video services, can be gateways for hackers.


A bad cyber-actor may not be able to access your locked-down computer directly, but it is possible that your unsecured TV can give him or her an easy way in the backdoor through your router,” the bureau said in its notice, issued ahead of Black Friday and Cyber Monday.
While the FBI didn’t directly warn about botnets, it should be noted that Internet of Things (IoT) devices like smart TVs are popular targets for botherders, according to security researchers.
“Many cyberattacks, like the Mirai malware and the Dyn attacks, infect a network of computers, including smart connected devices such as home appliances, security cameras, baby monitors, air conditioning/heating controls, televisions, etc., and turn them all into compromised servers,” wrote Alan Grau, vice president of IoT, Embedded Solutions at Sectigo, who also outlined concerns in a recent Threatpost webinar. “These compromised servers then act as nodes in an attack and together create a botnet. They can participate in a variety of coordinated attacks, infecting other devices and expanding the network of bots, or participating in denial-of-service attacks.”

To protect themselves from all of these threats, consumers should change smart TVs’ default security settings and passwords, and know how to turn off the microphones, cameras and collection of personal information if possible, the FBI said. They should also check a manufacturer’s track record with pushing out security patches.


Using a VPN is highly recommended, if possible at the router level.

Further reading :
FBI Issues Warning Over FaceApp Due to Russian Ties
https://news.softpedia.com/news/fbi-issues-warning-over-faceapp-due-to-russian-ties-528424.shtml

Last edited by labbe5 on Tue 03 Dec 2019, 09:26; edited 1 time in total
Back to top
View user's profile Send private message 
8Geee


Joined: 12 May 2008
Posts: 2103
Location: N.E. USA

PostPosted: Tue 03 Dec 2019, 07:25    Post subject:  

Cellphones will never be secure, ditto smartphone.
In fact, there is yet another problem.

GPS

It seems that the GPS can be jammed or fouled or intercepted.
With the advent of on-line gaming within a particular US State, such State requires using a GPS/wifi connection* to punt a few quid. Spoofing and/or jamming is rather easy for the tech-inclined person. In a word BOONDOGGLE.

*- There are reports on several gaming sites that a LAN connection is flatly refused: must use wifi.

Regards
8Geee

_________________
Linux user #498913 "Some people need to reimagine their thinking."
"Zuckerberg: a large city inhabited by mentally challenged people."
Back to top
View user's profile Send private message 
Moose On The Loose


Joined: 24 Feb 2011
Posts: 835

PostPosted: Tue 03 Dec 2019, 10:47    Post subject:
Subject description: The "S" in IOT
 

It is often said that the "S" in IOT stands for security.
In the kitchen, I have a toaster and a microwave. Neither are on the internet and there is no reason for them ever to be.

Dishwashers, clothes washers and dryers are another matter. It would be a very good idea to make them so that they can listen to the local power company and turn on in the small hours of the morning when demand is low. Sadly the lack of security and reliability makes this good thing less likely to happen any time soon.

The washing machine I use is an old one with the "clock work and relay" based timing and control. I often hear of people needing to get their machine "repaired again" or having to replace one that is only several years old because some critical part has failed and can't be replaced. Thus even if the security issues are fixed, I am not likely to have an IOT washer any time soon.
Back to top
View user's profile Send private message 
8Geee


Joined: 12 May 2008
Posts: 2103
Location: N.E. USA

PostPosted: Tue 03 Dec 2019, 12:08    Post subject:  

For want of a ubiquitous clock/timer function on a dishwasher/washer/dryer (they're on a lot of stuff including smartphones and microwaves) we need IoT. Lame excuse.

Separately, we have a more modern washer/dryer that has electronic conteol (no clock set to start wash/dry). About 4 years ago we had a power brownout/blackout associated with a winter storm. For lack of a few 5c diodes in a bridge circuit, the controller board fried. I ordered the part and did the replacement myself for $100. Repairman wanted $300 and a new machine was $350.

New and Improved !!!
8Geee

_________________
Linux user #498913 "Some people need to reimagine their thinking."
"Zuckerberg: a large city inhabited by mentally challenged people."
Back to top
View user's profile Send private message 
Burn_IT


Joined: 12 Aug 2006
Posts: 3608
Location: Tamworth UK

PostPosted: Tue 03 Dec 2019, 16:40    Post subject:  

A timer plug/socket costs £10.50 for a set of three (that was the first hit on google).
_________________
"Just think of it as leaving early to avoid the rush" - T Pratchett
Back to top
View user's profile Send private message 
8Geee


Joined: 12 May 2008
Posts: 2103
Location: N.E. USA

PostPosted: Tue 03 Dec 2019, 18:17    Post subject:  

Yes, Burn IT a good buy. Unfortunate the "in" for this IoT is that some appliances like the DishWash or Dryer come hard-wired without plug/outlet. Our 220V Dryer is that way.

Regards
8Geee

_________________
Linux user #498913 "Some people need to reimagine their thinking."
"Zuckerberg: a large city inhabited by mentally challenged people."
Back to top
View user's profile Send private message 
perdido


Joined: 09 Dec 2013
Posts: 1446
Location: ¿Altair IV , Just north of Eeyore Junction.?

PostPosted: Wed 04 Dec 2019, 13:28    Post subject:  

I have one of those IOT mops. I think it connects so it can look at facebook and see what the other mops are up to, maybe even the broom and dustpan are its friend. There is nothing nefarious involved, they are only connected to do social media and order from amazon, never need to check the mop head or mop bucket for wear. It has facebook, google mail, microsoft windows and twitter to keep it occupied, also a camera so it can show the other mops how great of a job it is doing plus it needs internet for the very important mop software updates.
Back to top
View user's profile Send private message 
8Geee


Joined: 12 May 2008
Posts: 2103
Location: N.E. USA

PostPosted: Wed 04 Dec 2019, 19:21    Post subject:  

+111 Laughing Laughing
_________________
Linux user #498913 "Some people need to reimagine their thinking."
"Zuckerberg: a large city inhabited by mentally challenged people."
Back to top
View user's profile Send private message 
some1

Joined: 17 Jan 2013
Posts: 105

PostPosted: Thu 05 Dec 2019, 01:38    Post subject:  

Somewhat related to IOT and mop-mobbing on social-media
the Register has a piece about a start-up - Den Automation -which tried to peddle the idea of remote switch-control:

https://www.theregister.co.uk/2019/12/03/den_automation_liquidation/

Wonder if early adapters have lost control of their switches.
Back to top
View user's profile Send private message 
Display posts from previous:   Sort by:   
Page 1 of 1 [11 Posts]  
Post new topic   Reply to topic View previous topic :: View next topic
 Forum index » Off-Topic Area » Security
Jump to:  

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.0702s ][ Queries: 12 (0.0145s) ][ GZIP on ]