Showing posts with label internet of things. Show all posts
Showing posts with label internet of things. Show all posts

Wednesday, May 24, 2023

Can't wait to find out how those will spy on me

from here and here

Oh, sure, the prototype is probably fine, but as soon as it's productized it's going to be "Do you consent to the collection of trouser data to enhance your trouser experience?" Hell no.

Wednesday, April 5, 2023

Sometimes it's smarter to be dumb

from here and here

When the advice to deal with a vulnerable Internet of Things device is to unplug it (effectively returning you to the dumb way of doing things), that's when you know "smart" isn't worth it.

Wednesday, March 1, 2023

Gives new meaning to the term "auto theft"

from here and here

Of course there are a number of other scenarios one can imagine with autonomous vehicles operating against the wishes of their owners, and a few of them come from the mind of Stephen King. However, given how car thieves have already adopted technological approaches to stealing cars, I have no doubt this will be one of the first ways crooks exploit this new technology.

Wednesday, January 25, 2023

The P in IoT stands for privacy

from here and here

I'm glad to hear that people aren't bothering to connect their smart appliances to the Internet. Good for them. Maybe the spy-appliance companies will take the hint and get out of the consumer surveillance game. People just want to wash their clothes and cool their food, they don't need devices that spy on you in your own home.

Tuesday, January 24, 2023

Too much faith in technology

from here and here

A networking failure shouldn't cause lights to get stuck in the ON position, and not anticipating those kinds of failures in your design is a pretty good indication that you didn't anticipate malicious misuse either. A good engineer anticipates failure. A good security engineer also anticipates malicious misuse. There are probably a number of security vulnerabilities in the system in addition to this lighting control DoS.

Thursday, January 12, 2023

How do you mess up water and detergent that bad?

from here and here

Now, I'll grant you even a dumb washing machine could theoretically short circuit, but this short circuit is apparently controllable with software, which makes me think maybe software shouldn't be involved.

Tuesday, December 6, 2022

Your Smart Toaster Is In My Botnet case

Product Page

Smart devices are notorious for being susceptible to this sort of thing, so why not remind people of it where ever you happen to take your laptop?

Friday, November 25, 2022

The Internet of $#!+ Paper

from here and here (image source)

I've heard some people like it rough, but I don't think this is what they had in mind.

Monday, October 10, 2022

Good thing they don't use the hands-on approach

found on Izismile

Gotta find those Internet connected anal beads somehow. 

Tuesday, October 4, 2022

Your Smart Toaster Is In My Botnet mug

Product Page

This is a cute graphic, though this isn't the best viewing angle. I guess it just provides motivation to move and get a better look at it so you can read the caption under that angry little smart toaster.

Wednesday, September 28, 2022

The future will be out of date

from here and here

The Internet of Things is going to be unmanageable if we keep building it out of general purpose computers.  If we must have smart devices, we should use special purpose computers with fixed, first order functionality. Not only would updates not be necessary, they wouldn't be possible.

One of the main reasons we use general purpose computers is because their generality allows us to use the same computer for pretty much any application, so we can benefit from an economy of scale by mass producing lots of them knowing we'll find a use for them. I think it might be possible to get similar benefits from special purpose computers used to build a set of fundamental controls - there are only a relatively small number of ways we control the devices around us (ex. toggle switches, dials, etc) and since each of those fundamental control types would be common across a number of different devices, a smaller economy of scale could still be achieved with special purpose computers that drive such controls but with the benefit of lower maintenance than can be achieved with general purpose computers.

You'd never be able to build a toaster that sings to you that way, but why would you want to?

Thursday, September 15, 2022

Bad Vibes

from here and here

It's a fantastical story, and kind of hard to believe, but apparently there are those who think a chess grand master cheated using high-tech anal beads. The theory appears to be that, using the remote controlled vibrations of the beads, an accomplice would have sent messages to the wearer instructing them what move to make. 

Tuesday, August 2, 2022

A naked data grab

from here (source article)

I haven't made a secret about my feelings towards the Internet of Shit, but most of the time those connected objects at least provide the user with some compelling reason to use them. Often they give the user some novel feature or make something more convenient.

This scarf doesn't do any of that. It provides no extra functionality to the wearer beyond what a normal scarf would. You don't get to see the data, only some 3rd parties do. The best case scenario is that maybe someone will pay you to wear it, and you better hope they do because by extracting biometric data out of it they are definitely getting something of value in return.

Tuesday, July 5, 2022

Smart Jewelry


Watch on YouTube

Normally I'm skeptical of "smart" technology, but this high-tech panic button disguised as jewelry actually seems like a pretty good idea. My only concern is whether it's transmissions can be used to track you. That might not be the threat model this is meant to address, however. I imagine run of the mill attackers on the street aren't employing sophisticated signal tracking equipment, and the kind of people who do employ it are going to need something more than just a panic button to deal with.

Wednesday, June 22, 2022

That's not what it was called when I did it

from here and here

Unless you've been living under a rock the past several years, you've probably noticed the trend of putting computers into things and calling them smart. Smart phones, smart TVs, smart toothbrushes, etc. Well it turns out that hot tubs are among the things that have become computerized and rather predictably they're not secure. So far the attacks have not involved compromising the hot tubs themselves to run cryptomining malware (hot tub mine machines) but instead the command and control servers run by the manufacturer - which makes me think they should be called bot tubs instead of hot tubs.

Tuesday, May 3, 2022

Finally a good use case for IoT

from here and here

Fortune really has not shone on the Russians lately. Maybe they can repurpose those Russian hackers of theirs to break the protection on these bricked tractors and harvesters they stole

Monday, May 2, 2022

Watch out for skid marks on the Internet of Shit

from here and here

Thanks to Rob Rosenberger for using the term "cyber commando" and prompting me to wonder about alternate interpretations. If you're wondering whether smart underwear are real - they are, and it's the most sophisticated technology you've ever pressed against your taint. It does raise some interesting privacy questions, though, especially since it has privileged access to your privates.

Thursday, April 21, 2022

It has one job and that's not it

from here and here

Connecting your printer to the Internet, where all the hackers are, seems like a recipe for disaster. It's not like I can install an antivirus or firewall on the printer. Whatever HP (or similar printer company) needs the printer to communicate to their servers they can put into the printer drivers you install on your computer that is already connected to the Internet.

Tuesday, April 19, 2022

A dark day for the Internet of Things

from here and here

When a smart home company advertises itself as "keeping the lights on", you kind of expect it to not disappear without a trace while it's executives scrub their existence off of LinkedIn. Maybe that's expecting too much, though.The extreme measures they're taking to apparently avoid accountability are probably going to attract the very kind of attention they're hoping to avoid. Congrats on invoking the Streisand Effect, gents.

Wednesday, January 5, 2022

For Receptacle Use Only

from here and here

I never imagined smart light bulbs could measure biometric properties like body temperature and heart rate. I suppose they must be emitting more than just visible light... at least I hope that's how it works. 

The problem now is how can you tell if someone else is using such a bulb and measuring your biometrics without your knowledge or consent?