IoT weakness
+ Reply to Thread
Page 1 of 2 1 2 LastLast
Posts 1 to 10 of 14

Thread: IoT weakness

  1. #1

    I live on CUK

    vetran is always on top

    vetran's Avatar
    Join Date
    Jul 2005
    Location
    Come Friendly Bombs
    Posts
    26,937
    Thanks (Given)
    793
    Thanks (Received)
    2637
    Likes (Given)
    6692
    Likes (Received)
    5430

    Default IoT weakness

    Half Baked IoT Stove Could Be Used As A Remote Controlled Arson Device | Hackaday

    [Pen Test Partners] have found some really scary vulnerabilities in AGA range cookers. They are connected by SMS by which a mobile app sends an unauthenticated SMS to the AGA to give it commands for instance preheat the oven, You can also just tell your AGA to turn everything on at once.

    The problem is with the web interface; it allows an attacker to check if a userís cell phone is already registered, allowing for a slow but effective enumeration attack. Once the attacker finds a registered device, all they need to do is send an SMS, as messages are not authenticated by the cooker, neither is the SIM card set up to send the messages validated when registered.
    You could burn half of Islington down!
    "If you didn't do anything that wasn't good for you it would be a very dull life. What are you gonna do? Everything that is pleasant in life is dangerous."

    I want to see the hand of history on his collar.

  2. #2

    TripleIronDad

    BrilloPad is always on top

    BrilloPad's Avatar
    Join Date
    Aug 2006
    Location
    Divorce Courts
    Posts
    98,209
    Thanks (Given)
    23281
    Thanks (Received)
    6091
    Likes (Given)
    23281
    Likes (Received)
    10323

    Default

    Office really hot today. It was reported last night - however night shift do not have internet access so could do nothing until day shift arrived.

    Someone was telling me MBNA Chester heating was controlled from the USA. Great fun with the time difference.
    I keep pushing forwards but they keep pushing me backwards. So I have new rules. 1. Don't feed the trolls you know they have no souls. 2. Don't respond to them they'll only post back back again. 3. Don't be their friend they'll only knife you in the back. I have new rules I count them.

  3. #3

    TykeLike

    SimonMac is a fount of knowledge

    SimonMac's Avatar
    Join Date
    Aug 2010
    Location
    God's Own Republic Of Yorkshire
    Posts
    22,272
    Thanks (Given)
    228
    Thanks (Received)
    1149
    Likes (Given)
    816
    Likes (Received)
    3028

    Default

    Wasn't there something recently about a similar vulnerability in washing machines?
    ďLive a good life. If there are gods and they are just, then they will not care how devout you have been, but will welcome you based on the virtues you have lived by. If there are gods, but unjust, then you should not want to worship them. If there are no gods, then you will be gone, but will have lived a noble life that will live on in the memories of your loved ones.Ē

    ― Marcus Aurelius

  4. #4

    I live on CUK

    vetran is always on top

    vetran's Avatar
    Join Date
    Jul 2005
    Location
    Come Friendly Bombs
    Posts
    26,937
    Thanks (Given)
    793
    Thanks (Received)
    2637
    Likes (Given)
    6692
    Likes (Received)
    5430

    Default

    Quote Originally Posted by SimonMac View Post
    Wasn't there something recently about a similar vulnerability in washing machines?
    yep kiddies with libraries they don't understand.
    "If you didn't do anything that wasn't good for you it would be a very dull life. What are you gonna do? Everything that is pleasant in life is dangerous."

    I want to see the hand of history on his collar.

  5. #5

    Prof Cunning @ Oxford Uni

    WTFH is a fount of knowledge

    WTFH's Avatar
    Join Date
    Nov 2012
    Posts
    10,807
    Thanks (Given)
    539
    Thanks (Received)
    1605
    Likes (Given)
    1536
    Likes (Received)
    3998

    Default

    The old oil/wood ones don't have any electrics in them, never mind electronics. Great when there's a blackout.
    Strong and Stable Moderation

  6. #6

    Godlike

    original PM - scorchio!

    original PM's Avatar
    Join Date
    Apr 2008
    Location
    Cheshire
    Posts
    9,123
    Thanks (Given)
    23
    Thanks (Received)
    316
    Likes (Given)
    76
    Likes (Received)
    1336

    Default

    another reason why the IoT is just pretty dumb and pointless!

  7. #7

    Godlike

    barrydidit is a fount of knowledge

    barrydidit's Avatar
    Join Date
    Oct 2012
    Location
    at the end of my tether
    Posts
    7,186
    Thanks (Given)
    466
    Thanks (Received)
    572
    Likes (Given)
    1814
    Likes (Received)
    2737

    Default

    Quote Originally Posted by SimonMac View Post
    Wasn't there something recently about a similar vulnerability in washing machines?
    And a dildo.

  8. #8

    Old Greg is my bitch's bitch

    northernladyuk is a fount of knowledge

    northernladyuk's Avatar
    Join Date
    Nov 2011
    Location
    Working the streets of your imagination
    Posts
    8,390
    Thanks (Given)
    1158
    Thanks (Received)
    635
    Likes (Given)
    424
    Likes (Received)
    2369

    Default

    Quote Originally Posted by original PM View Post
    another reason why the IoT is just pretty dumb and pointless!
    Another reason why original PM is just pretty dumb and pointless!
    Where there's muck there's brass.

  9. #9

    Super poster

    bobspud is NOT a disguised employee


    Join Date
    Jan 2009
    Posts
    3,368
    Thanks (Given)
    193
    Thanks (Received)
    101
    Likes (Given)
    990
    Likes (Received)
    471

    Default

    Yep IoT is a bloody nightmare and most organisations are not even remotely aware how ****ed they are.

  10. #10

    Godlike

    Paddy - scorchio!

    Paddy's Avatar
    Join Date
    Jul 2006
    Posts
    8,800
    Thanks (Given)
    88
    Thanks (Received)
    220
    Likes (Given)
    385
    Likes (Received)
    618

    Default

    How about a Wifi toilet paper dispenser. Instructions on how to download the app behind the toilet door.
    Company high efficiency = the maximum profit for the least amount effort
    Individual, the maximum salary for the least amount of effort = low productivity

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts

Content Relevant URLs by vBSEO 3.6.0 ©2011, Crawlability, Inc.