Easily HACKED!

newsMaking smart devices more secure for your home

Tuesday, March 20, 2018

Print this page Email A Friend!

OFF-the-shelf smart devices, such as baby monitors and home security cameras, can be easily hacked by criminals, say researchers who uncovered serious security issues with devices and networks used in smart homes and Internet of Things (IoT).

The researchers disassembled and reverse engineered many common devices and quickly discovered disturbing vulnerabilities. “It is truly frightening how easily a criminal, voyeur or paedophile can take over these devices,” said Yossi Oren, senior lecturer at Ben-Gurion University of the Negev (BGU) in Israel.

“Using these devices in our lab, we were able to play loud music through a baby monitor, turn off a thermostat and turn on a camera remotely, much to the concern of our researchers who themselves use these products,” said Oren.

“It only took 30 minutes to find passwords for most of the devices and some of them were found only through a Google search of the brand,” said Omer Shwartz, PhD student and member of Oren's lab.

“Once hackers can access an IoT device, like a camera, they can create an entire network of these camera models controlled remotely,” said Shwartz.

The researchers discovered several ways hackers can take advantage of poorly secured devices.

They discovered that similar products under different brands share the same common default passwords.

Consumers and businesses rarely change device passwords when purchased so they could be operating infected with malicious code for years.

They were also able to log on to entire Wi-Fi networks simply by retrieving the password stored in a device to gain network access. Oren urged manufacturers to stop using easy, hard-coded passwords, to disable remote access capabilities, and to make it harder to get information from shared ports, like an audio jack which was proven vulnerable in studies.

“It seems getting IoT products to market at an attractive price is often more important than securing them properly,” he said.

“The increase in IoT technology popularity holds many benefits, but this surge of new, innovative and cheap devices reveals complex security and privacy challenges,” said Yael Mathov, who also participated in the research.


With the goal of making consumers smarter about smart home device protection, the researchers offered these tips to keep devices more secure:

1. Buy devices only from reputable manufacturers and vendors.

2. Avoid used devices. They could already have malware installed.

3. Research each device online to determine if it has a default password and if so change it before installing.

4. Use strong passwords with a minimum of 16 letters. These are hard to crack.

5. Multiple devices shouldn't share the same passwords.

6. Update software regularly which you will only get from reputable manufacturers.

7. Carefully consider the benefits and risks of connecting a device to the internet.

Now you can read the Jamaica Observer ePaper anytime, anywhere. The Jamaica Observer ePaper is available to you at home or at work, and is the same edition as the printed copy available at http://bit.ly/epaperlive




1. We welcome reader comments on the top stories of the day. Some comments may be republished on the website or in the newspaper � email addresses will not be published.

2. Please understand that comments are moderated and it is not always possible to publish all that have been submitted. We will, however, try to publish comments that are representative of all received.

3. We ask that comments are civil and free of libellous or hateful material. Also please stick to the topic under discussion.

4. Please do not write in block capitals since this makes your comment hard to read.

5. Please don't use the comments to advertise. However, our advertising department can be more than accommodating if emailed: advertising@jamaicaobserver.com.

6. If readers wish to report offensive comments, suggest a correction or share a story then please email: community@jamaicaobserver.com.

7. Lastly, read our Terms and Conditions and Privacy Policy

comments powered by Disqus



Today's Cartoon

Click image to view full size editorial cartoon