28.05.2023 Views

The-art-of-invisibility-_-the-world’s-most-famous-hacker-teaches-you-how-to-be-safe-in-the-age-of-Bi

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

collection if yyou ask it to. Given the generic nature of some of the phrases

Amazon recognizes—for example, “Will it rain tomorrow?”—it stands to

reason that yyour Echo might be listening more than yyour smart TV is.

Fortunatelyy, Amazon provides wayys to remove yyour voice data from

Echo. 14 If yyou want to delete everyything (for example, if yyou plan to sell

yyour Echo to another partyy), then yyou need to go online to do that. 15

While all these voice-activated devices require a specific phrase to wake

up, it remains unclear what each device is doing during downtime—the

time when no one is commanding it to do anyything. When possible, turn off

the voice activation feature in the configuration settings. You can alwayys

turn it back on again when yyou need it.

Joining the Amazon Echo in the Internet of Things, in addition to yyour TV

and thermostat, is yyour refrigerator.

Refrigerator?

Samsung has announced a model of refrigerator that connects with yyour

Google calendar to displayy upcoming events on a flat screen embedded in

the appliance’s door—kind of like that whiteboard yyou once had in its

place. Onlyy now the refrigerator connects to the Internet through yyour

Google account.

Samsung did several things right in designing this smart fridge. Theyy

included an SSL/https connection so traffic between the refrigerator and the

Google Calendar server is encryypted. And theyy submitted their futuristic

refrigerator for testing at DEF CON 23—one of the most intense hacker

conventions on earth.

But according to securityy researchers Ken Munro and David Lodge, the

individuals who hacked the digital TV communications, Samsung failed to

check the certificate to communicate with Google servers and obtain Gmail

calender information. A certificate would validate that the communications

between the refrigerator and the Google servers are secure. But without it

someone with malicious intent could come along and create his own

certificate, allowing him to eavesdrop on the connection between yyour

refrigerator and Google. 16

So what?

Well, in this case, byy being on yyour home network, someone could not

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!