fedops 💙💛You're a door lock. You have one job.
nico
[lien] 40,000 IoT Cameras Worldwide Stream Secrets To Anyone With a Browser - Slashdot #privacy #ioshit #gik #net
40,000 IoT Cameras Worldwide Stream Secrets To Anyone With a Browser - Slashdot
Connor Jones reports via The Register: Security researchers managed to access the live feeds of 40,000 internet-connected cameras worldwide and they may have only scratched the surface of what's possible. Supporting the bulletin issued by the Department of Homeland Security (DHS) earlier this year,...
Benjamin Carr, Ph.D. 👨🏻💻🧬Two students find #security bug that could let millions do #laundry for free
Two #SantaCruz students uncover #securitybug that could let millions do their laundry for free
#CSCServiceWorks provides laundry machines to thousands of residential homes and universities, but the company ignored requests to fix a security bug.
Who could have seen a free laundry #exploit for internet-connected laundry machines coming?
https://techcrunch.com/2024/05/17/csc-serviceworks-free-laundry-million-machines/
#IoT #IoShit
inks.tedunangst.comThe winner, a group of cryptographic algorithms called Ascon, will be published as NIST’s lightweight cryptography standard later in 2023. The chosen algorithms are designed to protect information created and transmitted by the Internet of Things (IoT), including its myriad tiny sensors and actuators. They are also designed for other miniature technologies such as implanted medical devices, stress detectors inside roads and bridges, and keyless entry fobs for vehicles. Devices like these need “lightweight cryptography” — protection that uses the limited amount of electronic resources they possess.
Some time ago, we noticed at Realmode Labs that Amazon Kindle has an interesting feature called “Send to Kindle”. This feature allows Kindle users to send e-books to their device as email attachments. We immediately thought of the potential security concerns of this feature: what if we can send malicious e-books to unsuspecting users?
https://www.theregister.com/2020/07/18/samsung_bluray_mass_dieoff_explained/
> This file, when fetched and saved to the device’s flash storage and processed by the equipment, crashed the system software and force a reboot. Upon reboot, the player parsed the XML file again from its flash storage, crashed and rebooted again. And so on, and so on, and so on. Crucially, the XML file would be parsed before a new one could be fetched from the internet, so once the bad configuration file was fetched and stored by these particular Samsung Blu-ray players in the field, they were bricked.