Post by: gunug on November 10, 2016, 10:32:04 AM
QUOTE
Researchers from the Weizmann Institute of Science and Dalhousie University executed the chain-reaction attack by exploiting a vulnerability in the ZigBee wireless communications protocol, a widely used home automation protocol found at the center of millions of smart home devices.
Philips Hue lighting is just one example. Other notable ZigBee devices include the Nest thermostat and Logitech Harmony Ultimate home control hub. The infected payload was delivered by exploiting a weakness in Philips’ encryption to force an over-the-air firmware update using an autonomous attack kit built from equipment costing a few hundred dollars. Basically, anyone with the knowledge could execute a similar attack.
Of course, Philips was notified about the vulnerability and a patch was immediately issued.
http://www.electronicproducts.com/Optoelec...the_window.aspx
Philips Hue lighting is just one example. Other notable ZigBee devices include the Nest thermostat and Logitech Harmony Ultimate home control hub. The infected payload was delivered by exploiting a weakness in Philips’ encryption to force an over-the-air firmware update using an autonomous attack kit built from equipment costing a few hundred dollars. Basically, anyone with the knowledge could execute a similar attack.
Of course, Philips was notified about the vulnerability and a patch was immediately issued.
http://www.electronicproducts.com/Optoelec...the_window.aspx
The video on Youtube is kind of interesting: https://www.youtube.com/watch?v=Ed1OjAuRARU
I'm kind of doubting the intelligence of "smart" devices; any one can turn on an off a dumb light bulb and expect it to stay on or off unless it burns out or the power is out!
Post by: Xairbusdriver on November 10, 2016, 12:28:16 PM
