It’s not just computers that get hacked these days — researchers from Israel’s Ben-Gurion University of the Negreb are sounding the alarm on fundamental vulnerabilities in smart home devices. A new report in the journal Smart Card Research and Advanced Applications by school’s team at the Implementation Security and Side-Channel Attacks Lab found that it’s startlingly easy to uncover serious security risks in devices like baby monitors, home security cameras, doorbells, smart locks, and thermostats.
The researchers examined 16 off-the-shelf smart home gizmos to see if they could crack them. Out of these 16 devices, they were able to find the password for 14 of them while the majority of the devices were able to be accessed within 30 minutes and attached to a botnet. They originally set out to disassemble the devices and reverse-engineer them before they discovered that the easiest method was simply to track down the default factory-set passwords.
The majority of products in the smart home market come with common, easy-to-guess default passwords that many consumers never change, opting for convenience over safety. The researchers concluded that for many manufacturers, getting smart products to market at an affordable price is more important than securing them properly.
“It only took 30 minutes to find passwords for most of the devices, and some of them were found only through a Google search of the brand,” said Omer Shwartz, one of the researchers on the project. “Once hackers can access an Internet of Things (IoT) device, like a camera, they can create an entire network of these camera models controlled separately.”
Using the devices in their laboratory, the researchers were able to play loud music through a baby monitor, turn off thermostats and other devices and turn on cameras remotely. The security implications of this study are, or should be, of great concern to the massive number of people using IoT devices without implementing better security protocols.
“You only need physical access once,” said Dr. Yossi Oren, who heads up the cybersecurity lab. “Once you buy one copy of a make and model of a camera and you attack it in your lab, you get information which will allow you to attack this make and model anywhere remotely,” he said.
In addition to uncovering these security faults, the researchers also put together a number of tips to keep smart home devices, families ,and businesses more secure. Their protocols include:
“The increase in IoT technology popularity holds many benefits, but this surge of new, innovative, and cheap devices reveals complex security and privacy challenges,” said researcher Yael Mathov. “We hope our findings will hold manufacturers more accountable and help alert both manufacturers and consumers to the dangers inherent in the widespread use of unsecured IoT devices.”
Previous research by the Ben-Gurion University cybersecurity team has included cracking the debug port on certain IoT cameras, applying a new innovative firewall to Android phones, uncovering a unique hacking technique known as ” air-gapping,” and finding a way to transform headphones into microphones.
Few things ruin a quiet evening faster than a robot vacuum roaring through the living room. Most of us end up pausing the cleaning run, which defeats the whole purpose of owning one. Matic thinks it has the answer with its new Serene robot vacuum, and the big selling point is how little noise it makes.
The Matic Serene runs at 52 decibels even when cleaning at full power. To put that in perspective, Matic compares it to the hum of your refrigerator. It is available now for $1,695, which is $200 more than the original Matic’s current price.
Outdoor security cameras are not always practical if you live in an apartment or rental. Drilling into an exterior wall may be off-limits, while pointing a regular indoor camera through a window can create another problem once reflections start showing up after dark.
Baseus is trying to solve both issues with the new PrimeSentinel W1, a $69.99 security camera designed specifically to monitor the outdoors through glass. It mounts directly to a window without drilling and uses a 4K Starlight sensor with an F1.0 aperture for full-color monitoring during the day and at night.
This post is brought to you in paid partnership with Best Buy.
Technology evolves every day, transforming how we live and work. Our devices are becoming more than tools we use. They are increasingly capable companions that help streamline day-to-day routines and spark creative ideas. If you have been waiting for the right moment to upgrade your tech setup, the Discover Samsung Shopping Event offers an opportunity to explore what connected, AI-powered living can look like.