Message from @Beemann

Discord ID: 522478583407575041


2018-12-12 18:16:57 UTC  

Like the oven where the smart feature is turning off a safety feature

2018-12-12 18:17:12 UTC  

uh what?

2018-12-12 18:17:55 UTC  

Yes, there is a smart oven where one of its automated features is that it will basically turn itself off if accidentally left on, and you can turn this feature off wirelessly

2018-12-12 18:18:20 UTC  

From what I remember this was the only smart functionality it had

2018-12-12 18:18:31 UTC  

So giving people control?

2018-12-12 18:18:41 UTC  

not sure thats a safety feature, actualy. I think it will shut off if it gets to hot regardless

2018-12-12 18:19:09 UTC  

Giving anyone with network access the ability to turn off a safety feature, not just you in your own home lol

2018-12-12 18:19:39 UTC  

What do you mean not just in your home?

2018-12-12 18:19:46 UTC  

There are people who had their smart lights hacked for days on end, going into rave mode and spelling out Morse code

2018-12-12 18:19:46 UTC  

network access to your own (w)lan though, right?

2018-12-12 18:19:51 UTC  

id hope

2018-12-12 18:20:09 UTC  

Smart devices can can be remotely accessed via the internet

2018-12-12 18:20:54 UTC  

Most people have shit passwords on their local networks, and if your neighbour has wireless fuck safety oven, you're potentially in danger too

2018-12-12 18:21:27 UTC  

huh

2018-12-12 18:21:43 UTC  

There is a difference between people hacking lights and trying to blow up your oven

2018-12-12 18:21:58 UTC  

Right and the existence of one proves the possibility of the other

2018-12-12 18:22:36 UTC  

The trick is to be very careful about what you add wireless functionality to

2018-12-12 18:22:45 UTC  

i was pretty sure you couldnt even make shit passwords. arent they all like 64 byte or something? Now the access to the admin commands on the router is a different story but for that you first need to have access to the network overall.

2018-12-12 18:23:09 UTC  

Hell, doesn't even have to be ravemode lights
Imagine you can check the status of everyone's lights on a whole street

2018-12-12 18:23:09 UTC  

They can still be bruteforced

2018-12-12 18:23:21 UTC  

Most people don't even move beyond admin/admin lol

2018-12-12 18:23:44 UTC  

How easy will burglars have it now that they can see when nobody is home

2018-12-12 18:24:07 UTC  

House 3's lights have been off for several days, time to loot their shit

2018-12-12 18:24:11 UTC  

Saying that security doesnt evolve

2018-12-12 18:24:29 UTC  

It only evolves if and when people buy into it

2018-12-12 18:24:41 UTC  

And currently it's evolving with the same faults

2018-12-12 18:25:07 UTC  

If it becomes any sort of problem people will buy into it and the devices may very well adapt them also

2018-12-12 18:25:29 UTC  

The fault is inherent in IoT, which is that things that weren't network vulnerable now are

2018-12-12 18:25:37 UTC  

You're adding a whole dimension of security issues

2018-12-12 18:26:12 UTC  

@Existence is identity well it can be bruteforced. but at current levels of technology the sun will be a red giant before thats done at wpa2 for instance with 63 charackters

2018-12-12 18:27:03 UTC  

Not everything is wpa2 though

2018-12-12 18:27:27 UTC  

Brute force isn't even necessary at this point

2018-12-12 18:27:45 UTC  

Phishing and using defaults are still surprisingly effective

2018-12-12 18:28:00 UTC  

must be different over there then.

2018-12-12 18:28:13 UTC  

Most people use defaults actually

2018-12-12 18:28:17 UTC  

Hey normies. I'm back.

2018-12-12 18:28:20 UTC  

Yup

2018-12-12 18:28:48 UTC  

over here, the admin access to the router has default values, but the wpa keys and such are randomised and printed on the buttom of the device.

2018-12-12 18:29:10 UTC  

They've been doing that more recently here

2018-12-12 18:29:23 UTC  

Because the average consumer will not come up with a good pw

2018-12-12 18:29:44 UTC  

true