IoT weakness

[vetran]

has this thread been renamed?

Yep Aga's only speak English don't yer know?

[barrydidit]

has this thread been renamed?

[vetran]

Somebody is trying to destroy all credit records to free the people from debt....

First rule of Fight club!

[AtW]

Office really hot today. It was reported last night - however night shift do not have internet access so could do nothing until day shift arrived.
Someone was telling me MBNA Chester heating was controlled from the USA. Great fun with the time difference.

Somebody is trying to destroy all credit records to free the people from debt....

[Paddy]

How about a Wifi toilet paper dispenser. Instructions on how to download the app behind the toilet door.

[bobspud]

Yep IoT is a bloody nightmare and most organisations are not even remotely aware how ****ed they are.

[northernladyuk]

another reason why the IoT is just pretty dumb and pointless!

Another reason why original PM is just pretty dumb and pointless!

[barrydidit]

Wasn't there something recently about a similar vulnerability in washing machines?

And a dildo.

[original PM]

another reason why the IoT is just pretty dumb and pointless!

[WTFH]

The old oil/wood ones don't have any electrics in them, never mind electronics. Great when there's a blackout.

[vetran]

Wasn't there something recently about a similar vulnerability in washing machines?

yep kiddies with libraries they don't understand.

[SimonMac]

Wasn't there something recently about a similar vulnerability in washing machines?

[BrilloPad]

Office really hot today. It was reported last night - however night shift do not have internet access so could do nothing until day shift arrived.

Someone was telling me MBNA Chester heating was controlled from the USA. Great fun with the time difference.

[vetran]

Half Baked IoT Stove Could Be Used As A Remote Controlled Arson Device | Hackaday

[Pen Test Partners] have found some really scary vulnerabilities in AGA range cookers. They are connected by SMS by which a mobile app sends an unauthenticated SMS to the AGA to give it commands for instance preheat the oven, You can also just tell your AGA to turn everything on at once.

The problem is with the web interface; it allows an attacker to check if a user’s cell phone is already registered, allowing for a slow but effective enumeration attack. Once the attacker finds a registered device, all they need to do is send an SMS, as messages are not authenticated by the cooker, neither is the SIM card set up to send the messages validated when registered.

You could burn half of Islington down!