+ Reply to Thread
Page 1 of 2 1 2 LastLast
Posts 1 to 10 of 14

Thread: IoT weakness

  1. #1

    I live on CUK

    vetran is a fount of knowledge

    vetran's Avatar
    Join Date
    Jul 2005
    Location
    Come Friendly Bombs
    Posts
    24,247
    Thanks (Given)
    509
    Thanks (Received)
    1962
    Likes (Given)
    4923
    Likes (Received)
    4363

    Default IoT weakness

    Half Baked IoT Stove Could Be Used As A Remote Controlled Arson Device | Hackaday

    [Pen Test Partners] have found some really scary vulnerabilities in AGA range cookers. They are connected by SMS by which a mobile app sends an unauthenticated SMS to the AGA to give it commands for instance preheat the oven, You can also just tell your AGA to turn everything on at once.

    The problem is with the web interface; it allows an attacker to check if a userís cell phone is already registered, allowing for a slow but effective enumeration attack. Once the attacker finds a registered device, all they need to do is send an SMS, as messages are not authenticated by the cooker, neither is the SIM card set up to send the messages validated when registered.
    You could burn half of Islington down!
    "If you didn't do anything that wasn't good for you it would be a very dull life. What are you gonna do? Everything that is pleasant in life is dangerous."

    I want to see the hand of history on his collar.

  2. #2

    TripleIronDad

    BrilloPad is a fount of knowledge

    BrilloPad's Avatar
    Join Date
    Aug 2006
    Posts
    89,523
    Thanks (Given)
    13309
    Thanks (Received)
    2866
    Likes (Given)
    13309
    Likes (Received)
    5820

    Default

    Office really hot today. It was reported last night - however night shift do not have internet access so could do nothing until day shift arrived.

    Someone was telling me MBNA Chester heating was controlled from the USA. Great fun with the time difference.
    What is the difference between ignorance and indifference? Don't know and don't care.

  3. #3

    TykeLike

    SimonMac - scorchio!

    SimonMac's Avatar
    Join Date
    Aug 2010
    Location
    God's Own Republic Of Yorkshire
    Posts
    21,769
    Thanks (Given)
    220
    Thanks (Received)
    984
    Likes (Given)
    784
    Likes (Received)
    2750

    Default

    Wasn't there something recently about a similar vulnerability in washing machines?
    ďLive a good life. If there are gods and they are just, then they will not care how devout you have been, but will welcome you based on the virtues you have lived by. If there are gods, but unjust, then you should not want to worship them. If there are no gods, then you will be gone, but will have lived a noble life that will live on in the memories of your loved ones.Ē

    ― Marcus Aurelius

  4. #4

    I live on CUK

    vetran is a fount of knowledge

    vetran's Avatar
    Join Date
    Jul 2005
    Location
    Come Friendly Bombs
    Posts
    24,247
    Thanks (Given)
    509
    Thanks (Received)
    1962
    Likes (Given)
    4923
    Likes (Received)
    4363

    Default

    Quote Originally Posted by SimonMac View Post
    Wasn't there something recently about a similar vulnerability in washing machines?
    yep kiddies with libraries they don't understand.
    "If you didn't do anything that wasn't good for you it would be a very dull life. What are you gonna do? Everything that is pleasant in life is dangerous."

    I want to see the hand of history on his collar.

  5. #5

    キツネの帽子をかぶる

    WTFH - scorchio!

    WTFH's Avatar
    Join Date
    Nov 2012
    Posts
    6,803
    Thanks (Given)
    7
    Thanks (Received)
    682
    Likes (Given)
    654
    Likes (Received)
    2309

    Default

    The old oil/wood ones don't have any electrics in them, never mind electronics. Great when there's a blackout.
    0. Absolute Power corrupts absolutely. Moderator Power corrupts moderately.
    1. I have a low tolerance level for idiots.
    2. You have to earn my respect, demanding it won't work.

  6. #6

    Godlike

    original PM is NOT a disguised employee

    original PM's Avatar
    Join Date
    Apr 2008
    Location
    Cheshire
    Posts
    7,598
    Thanks (Given)
    11
    Thanks (Received)
    126
    Likes (Given)
    35
    Likes (Received)
    823

    Default

    another reason why the IoT is just pretty dumb and pointless!

  7. #7

    Godlike

    barrydidit - scorchio!

    barrydidit's Avatar
    Join Date
    Oct 2012
    Location
    at the end of my tether
    Posts
    6,086
    Thanks (Given)
    318
    Thanks (Received)
    376
    Likes (Given)
    1478
    Likes (Received)
    2164

    Default

    Quote Originally Posted by SimonMac View Post
    Wasn't there something recently about a similar vulnerability in washing machines?
    And a dildo.

  8. #8

    Super poster

    northernladyuk is NOT a disguised employee

    northernladyuk's Avatar
    Join Date
    Nov 2011
    Location
    Working the streets of your imagination
    Posts
    2,606
    Thanks (Given)
    272
    Thanks (Received)
    129
    Likes (Given)
    168
    Likes (Received)
    741

    Default

    Quote Originally Posted by original PM View Post
    another reason why the IoT is just pretty dumb and pointless!
    Another reason why original PM is just pretty dumb and pointless!
    Where there's muck there's brass.

  9. #9

    Super poster

    bobspud has more data than eek


    Join Date
    Jan 2009
    Posts
    2,970
    Thanks (Given)
    137
    Thanks (Received)
    55
    Likes (Given)
    716
    Likes (Received)
    338

    Default

    Yep IoT is a bloody nightmare and most organisations are not even remotely aware how ****ed they are.

  10. #10

    Godlike

    Paddy has more data than eek

    Paddy's Avatar
    Join Date
    Jul 2006
    Posts
    8,038
    Thanks (Given)
    5
    Thanks (Received)
    36
    Likes (Given)
    76
    Likes (Received)
    222

    Default

    How about a Wifi toilet paper dispenser. Instructions on how to download the app behind the toilet door.
    Mice in the kitchen. Brexit remedy: Why spend £3.50 on mouse traps when we can set fire to the house and live in a tent.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts

Content Relevant URLs by vBSEO 3.6.0 ©2011, Crawlability, Inc.