SoylentNews is people
SoylentNews
Submitted via IRC for SoyCow3941
[....] Nicole Eagan, CEO of cybersecurity company Darktrace, revealed Thursday that a casino fell victim to hackers thanks to a smart thermometer it was using to monitor the water of an aquarium they had installed in the lobby, Business Insider reported. The hackers managed to find and steal information from the casino's high-roller database through the thermometer.
"The attackers used that to get a foothold in the network," Eagan said at a Wall Street Journal panel. "They then found the high-roller database and then pulled that back across the network, out the thermostat, and up to the cloud."
That database may have included information about some of the unnamed casino's biggest spenders along with other private details, and hackers got a hold of it thanks to the internet of things.
Source: Hackers exploit casino's smart thermometer to steal database info
(Score: 2) by HiThere on Monday April 16 2018, @09:30PM (2 children)
Well, it *is* relevant. It might not be the only thing that needs to be patched, but it should also be looked at.
Javascript is what you use to allow unknown third parties to run software you have no idea about on your computer.
(Score: 1) by hopdevil on Monday April 16 2018, @10:08PM (1 child)
If anything it is a red herring.. worrying about patching IoT devices when the rest of your infrastructure security is poo. If there even were patches for the devices -- assuming it is even beyond a static username/password -- it could just as easily been a laptop plugged in.
It must be cool and newsworthy these days to blame a random device on your network for a security breach because it is "IoT"?
(Score: 2) by black6host on Monday April 16 2018, @10:20PM
With respect to the whole mess, IOTs, existing network systems, etc: Security needs to taken more seriously. Much more seriously. Or, we need to keep sensitive info off of networks but I don't see that happening, kind of defeats the purpose of all these damn computer systems :) It's just like anything else, if the risk of ignoring security, and subsequent results if you do so, don't outweigh benefits of a more secure system (think potential profit vs risk) then we'll just stagnate here for a bit. When the pain of staying is greater than the pain of changing then we'll see something happen.