Consumers who outfit their homes with home automation devices without considering security may be inviting hackers and thieves inside.
Repeatedly, studies have revealed that devices designed to automate the home have serious vulnerabilities. Many devices have weak password policies and do not protect against man-in-the-middle attacks, according to an HP survey of 10 off-the-shelf home security systems. Others do not prevent access to the device’s debugging interface, which could allow easy hacking of the device, according to an April study by code-security firm Veracode. And, if an attacker is able to gain access to the device, almost all devices could be easily compromised and turned into a Trojan Horse, according to a study by security from Synack. In fact, it only took between 5 and 20 minutes to find a way to compromise each device, once the researchers unpacked the hardware.
“These companies are really pushing to get a product to market to really compete in this Internet of things boom, but they don’t have a security guy on their team, so there is a lot of small stuff being overlooked,” says Colby Moore, a security research analyst for Synack. “The majority of companies are ignoring the basics.”
| Buying a used Nest could be a bad idea. Criminals could install custom firmware that enables them to compromise a host of other devices on your home network. |