SoylentNews is people
SoylentNews
Submitted via IRC for Bytram
Consumers Urged to Junk Insecure IoT Devices
A security researcher who disclosed flaws impacting 2 million IoT devices in April – and has yet to see a patch or even hear back from the manufacturers contacted – is sounding off on the dire state of IoT security.
More than 2 million connected security cameras, baby monitors and other IoT devices have serious vulnerabilities that have been publicly disclosed for more than two months – yet they are still without a patch or even any vendor response.
Security researcher Paul Marrapese, who disclosed the flaws in April and has yet to hear back from any impacted vendors, is sounding off that consumers throw the devices away. The flaws could enable an attacker to hijack the devices and spy on their owners – or further pivot into the network and carry out more malicious actions.
“I 100 percent suggest that people throw them out,” he told Threatpost in a podcast interview. “I really, I don’t think that there’s going to be any patch for this. The issues are very, very hard to fix, in part because, once a device is shipped with a serial number, you can’t really change that, you can’t really patch that, it’s a physical issue.”
Marrapese said that he sent an initial advisory to device vendors in January, and after coordinating with CERT eventually disclosed the flaws in April due to their severity. However, even in the months after disclosure he has yet to receive any responses from any impacted vendors despite multiple attempts at contact. The incident points to a dire outlook when it comes to security, vendor responsibility, and the IoT market in general, he told Threatpost.
b-b-b-b-but it is still working!
(Score: 2) by Dr Spin on Thursday June 20 2019, @06:49AM
I just want a dumb car. Any mid-range late last century will do.
So do I.
But here in the UK, they are working hard on banning older cars completely.
Currently, cars prior to Euro6 (2015) are effectively banned from central London,
with plans to extend this to most of London in 2021. I believe other cities will
be drawn into the net because it is supposedly about pollution.
Unfortunately, while we know Euro6 engines are lower pollution in a Lab
there is no scientific data whatever that they are better on the road.
(Note that we are also told that electric cars produce less pollution - although
most of the bad pollution these days is particulates -which are produced by the tyres and
brakes - and, since electric cars are much heavier, they will produce a lot more
of these particulates).
And we are told that Diesels are bad because of NO2 - but older diesel engines did not
produce NO2 - it is only the more recent ones that run the engine extremely hot.
Euro6 engines use urea injection to neutralise the the NO2 - but who knows if they use
the right about of Urea on the road? You cannot measure how much is required,
since it depends on the amount of gas and temperature in the combustion chamber,
which is too hot for sensors to measure - so the microprocessor has to guess.
And, guess what, reports of asthma and other breathing problems have increased
enormously since Euro6 engines were introduced, although NO2 has gone down.
We have also seen car theft go up 50% because of keyless "locks" - which are
completely useless as security devices (unlike a mechanical key which is known
to work perfectly well, and cost less than 1/10 the price to replace).
I don't dispute that older diesel engines produce particulates - but they did not
have DPFs.
[Petrol engines produce masses of NO2, but allegedly the catalytic converters
are effective at removing it. Again, not much field data on petrol cars in real life
situations, either].
Warning: Opening your mouth may invalidate your brain!