Stories
Slash Boxes
Comments

SoylentNews is people

Billions of Records Leaked by Smart Home Vendor

posted by Fnord666 on Tuesday July 02 2019, @01:22PM   Printer-friendly
from the no-salt-added dept.

RandomFactor writes:

BleepingComputer reports that Chinese smart home vendor Orvibo has an unsecured database online that exposes over 2 billion logs detailing usernames, email address, passwords and more.

The disclosing research firm's report is available here.

vpnMentor's research team reached out to the vendor on June 16th, but did not receive a response and as of publication the database is apparently still online and the amount of data exposed is still increasing.

Exposed data includes:

  • Email addresses
  • Passwords
  • Account reset codes
  • Precise user geolocation
  • IP addresses
  • Username & UserID
  • Family name & Family ID
  • Device name & Device that accessed account
  • Recorded conversations through Smart Camera
  • Scheduling information

Passwords are hashed but without adding a salt, making them relatively easy to crack.

Possibilities for hackers are myriad, including completely locking users out of their own accounts and taking complete control of smart homes, accessing video feeds, unlocking doors and more.

Original Submission

 
This discussion has been archived. No new comments can be posted.
Billions of Records Leaked by Smart Home Vendor | Log In/Create an Account | Top | 15 comments | Search Discussion
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.

  • (Score: 3, Insightful) by TheRaven on Tuesday July 02 2019, @03:48PM (1 child)

    by TheRaven (270) on Tuesday July 02 2019, @03:48PM (#862421) Journal
    So you sue a Chinese Internet of Crap vendor. They don't defend themselves and you get a summary judgement. They have no assets in the country you're in, so you manage to get the court to order an injunction that prevents them from bringing any of their products into your country. They go bankrupt, their factories, brand trademarks, and product designs are bought by another Chinese company that happens to have the same set of directors and shareholders and all of the employees move over. They sell a new version of the product. Who wins?
    --
    sudo mod me up
    Starting Score:    1  point
    Moderation   +1  
       Insightful=1, Total=1
    Extra 'Insightful' Modifier   0  
    Karma-Bonus Modifier   +1  
    Total Score:   3  

  • (Score: 4, Touché) by bob_super on Tuesday July 02 2019, @04:14PM

    by bob_super (1357) on Tuesday July 02 2019, @04:14PM (#862434)

    As always : Lawyers