Page 1 of 1

I warned you all about internet connected appliances!

Posted: Tue Jan 21, 2014 10:06 pm
by Deanjo
Heh, just days after Krogoth dismissed my warnings about backdoors through internet connected appliances.....

Well low and behold...

http://smallbiztrends.com/2014/01/appli ... iness.html

http://www.neowin.net/news/cyber-attack ... appliances

http://www.proofpoint.com/about-us/pres ... 162014.php

Just call me the prophet. :wink:

Re: I warned you all about internet connected appliances!

Posted: Tue Jan 21, 2014 10:22 pm
by zenlessyank
OK, Prophet, my house has a backdoor made of glass. It slides too!!!

I'm pre-conditioned for these new back doors.

Thanks for the heads-up though.

Re: I warned you all about internet connected appliances!

Posted: Tue Jan 21, 2014 10:39 pm
by Deanjo
I knew it was just a matter of time. I've been hacking away at these "smart appliances" for a few years now. Just the other weekend I managed to add functionality to my Yamaha receiver's web UI that allows the switching of my wemo outlets for the lighting.

Re: I warned you all about internet connected appliances!

Posted: Wed Jan 22, 2014 12:53 am
by MadManOriginal
So our robot vacuums will be part of a botnet? Makes perfect sense really...

Re: I warned you all about internet connected appliances!

Posted: Wed Jan 22, 2014 2:42 am
by just brew it!
There are some questions as to whether the analysis these stories are based on is correct. They may have incorrectly identified appliances as the source of attacks based on the appliances being behind the same NAT routers as infected PCs (so same public IP address).

Re: I warned you all about internet connected appliances!

Posted: Wed Jan 22, 2014 7:21 am
by Deanjo
just brew it! wrote:
There are some questions as to whether the analysis these stories are based on is correct. They may have incorrectly identified appliances as the source of attacks based on the appliances being behind the same NAT routers as infected PCs (so same public IP address).


Ain't IPv6 awesome? No pesky NAT.

Re: I warned you all about internet connected appliances!

Posted: Wed Jan 22, 2014 8:30 am
by grantmeaname
I for one welcome our new vacuum overlords.

Re: I warned you all about internet connected appliances!

Posted: Wed Jan 22, 2014 9:31 am
by derFunkenstein
MadManOriginal wrote:
So our robot vacuums will be part of a botnet? Makes perfect sense really...

That really sucks. /sadtrombone

Re: I warned you all about internet connected appliances!

Posted: Wed Jan 22, 2014 9:35 am
by superjawes
grantmeaname wrote:
I for one welcome our new vacuum overlords.

I lol'd.

Re: I warned you all about internet connected appliances!

Posted: Wed Jan 22, 2014 9:36 am
by l33t-g4m3r
Target level mass hacks from unsecure home appliances connected to the internet. Nice. Let's put cars on the grid too, while we're at it, so we can be remote controlled into a tree.

Re: I warned you all about internet connected appliances!

Posted: Wed Jan 22, 2014 10:31 am
by anotherengineer
derFunkenstein wrote:
MadManOriginal wrote:
So our robot vacuums will be part of a botnet? Makes perfect sense really...

That really sucks. /sadtrombone


lol sadtrombone

how can anyone who has internet access be sad :)

Re: I warned you all about internet connected appliances!

Posted: Wed Jan 22, 2014 10:37 am
by Scrotos
just brew it! wrote:
There are some questions as to whether the analysis these stories are based on is correct. They may have incorrectly identified appliances as the source of attacks based on the appliances being behind the same NAT routers as infected PCs (so same public IP address).


To expound on this:

http://arstechnica.com/security/2014/01 ... ng-botnet/

"The aggregate of the information doesn't paint an adequately compelling picture that what they're asserting occurred actually occurred," Royal said. "When you ask something as simple as how do you know the spam came from gadgets they say: 'Well, we looked at the IP addresses of the systems sending the spam and when we presumably probed them we observed that they were coming from set-top-box-like devices.' The technical analysis of that shows that there could be plenty of other explanations."

Knight said he would check to see if missing evidence—including a malware sample, documentation of a command-and-control server, and samples of the spam and phishing messages—are available for publication. Again, I'm open to the possibility the botnet reported by Proofpoint exists. But until these smoking guns are produced, I'm maintaining a healthy amount of skepticism.


Now I'm not a fan of the "internet of things" idea, personally. I mean, it's hard enough to keep consumer-level routers patched and secured and now you got crap like this to worry about:

http://arstechnica.com/security/2013/11 ... gger-says/

I can't imagine manufacturers are really trustworthy for this kinda junk. And stuff like Nest and SimCity "needing" to connect to the internet to give you the "best" experience... blah.

Re: I warned you all about internet connected appliances!

Posted: Wed Jan 22, 2014 10:48 am
by just brew it!
l33t-g4m3r wrote:
Target level mass hacks from unsecure home appliances connected to the internet. Nice. Let's put cars on the grid too, while we're at it, so we can be remote controlled into a tree.

Yeah, can you imagine the sort of total chaos that will ensue when Anonymous starts trolling people they don't like by randomly shutting off water heaters and furnaces, opening garage doors, and burning the Sunday dinner roast? :lol:

And yes I'm being (mostly) facetious, but this stuff isn't too far-fetched.