Stories
Slash Boxes
Comments

SoylentNews is people

posted by Fnord666 on Friday August 07 2020, @07:22PM   Printer-friendly
from the pwned dept.

Black Hat: Hackers can remotely hijack enterprise, healthcare Temi robots:

Temi's interactive assistance robots are remotely exploitable with little more than a phone number.

On Thursday at Black Hat USA, McAfee's Advanced Threat Research (ATR) team disclosed new research into the robots, in which remotely-exploitable vulnerabilities were uncovered, potentially leading to mobile, audio, and video tampering on the hospital floor.

The robot in question is Robotemi Global's Temi, a "personal robot" that uses a range of sensors, artificial intelligence (AI) and machine learning (ML) technologies, as well as modern voice activation and mobile connectivity to perform functions including personal assistance tasks, answering Internet queries, and facilitating remote video calls.

[...] In total, four vulnerabilities were found, the use of hard-coded credentials, an origin validation error, missing authentication for critical functions, and an authentication bypass. The security issues spotted by McAfee have been assigned CVE-2020-16170, CVE-2020-16168, CVE-2020-16167, and CVE-2020-16169.

"Together, these vulnerabilities could be used by a malicious actor to spy on Temi's video calls, intercept calls intended for another user, and even remotely operate Temi -- all with zero authentication," the researchers say.


Original Submission

This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
(1)
  • (Score: 2) by Runaway1956 on Friday August 07 2020, @07:37PM (6 children)

    by Runaway1956 (2926) Subscriber Badge on Friday August 07 2020, @07:37PM (#1033109) Homepage Journal

    Let's make a list of things that hackers CANNOT hack.

    1.

    Well, I think we're finished here.

    --
    Abortion is the number one killed of children in the United States.
    • (Score: 0) by Anonymous Coward on Friday August 07 2020, @07:52PM (2 children)

      by Anonymous Coward on Friday August 07 2020, @07:52PM (#1033116)

      1- My Brain

      #EF4President2020

      • (Score: 0) by Anonymous Coward on Friday August 07 2020, @08:12PM

        by Anonymous Coward on Friday August 07 2020, @08:12PM (#1033125)

        Objection. Assumes facts not in evidence.

      • (Score: 2) by looorg on Friday August 07 2020, @08:12PM

        by looorg (578) on Friday August 07 2020, @08:12PM (#1033127)

        Just wait a (insert suitable time period here) for when you get some sort of cybernetic implant in your brain. I guess we can come back and adjust the list then. Until that time there is always tried and true psychological manipulation.

    • (Score: 0) by Anonymous Coward on Friday August 07 2020, @08:52PM

      by Anonymous Coward on Friday August 07 2020, @08:52PM (#1033154)

      Democracy

    • (Score: 2) by DannyB on Friday August 07 2020, @09:17PM

      by DannyB (5839) Subscriber Badge on Friday August 07 2020, @09:17PM (#1033165) Journal

      Let's make a list of things that hackers CANNOT hack.

      Let's see them hack their way through a forest overgrown with systemd weeds.

      Hack:
      * to cut or sever with repeated irregular or unskillful blows
      * to clear or make by or as if by cutting away vegetation
      * a writer who aims solely for commercial success

      --
      Why is it that when I hold a stick, everyone begins to look like a pinata?
    • (Score: 2) by ikanreed on Friday August 07 2020, @09:56PM

      by ikanreed (3164) on Friday August 07 2020, @09:56PM (#1033191) Journal

      The Moon.

      I'm given to understand you need baby witches for that.

  • (Score: 0) by Anonymous Coward on Friday August 07 2020, @09:37PM (4 children)

    by Anonymous Coward on Friday August 07 2020, @09:37PM (#1033175)

    The sub queue get some ... uh... "interesting" submissions, including a few posted by yours truly. Good number of them are discarded.

    For the weekends, just put out the outlandish ones, edit them up for extra, full-out, internet keyboard warrior/SJW outrage,

    Whatcha think? I mean, we ain't got no Saturday college football, no Sunday NFL (which has been garbage for long time already.)

    Except for race stuff - too toxic.

    Gender stuff is ok - and pointless, since there is no women on SN,

    • (Score: 0) by Anonymous Coward on Friday August 07 2020, @10:09PM (2 children)

      by Anonymous Coward on Friday August 07 2020, @10:09PM (#1033197)

      > ... Except for race stuff - too toxic.

      Not sure where you are, but the Formula 1 race will be on ESPN on Sunday morning (USA), the broadcasting deal is special this year--no commercials once the race starts! This is almost unheard of for sporting coverage on USA TV, except possibly pay-to-view events?

      After last week's tire failures at the end of the race*, it will be interesting to see if the teams have figured out a work around (I don't think Pirelli will have had time to manufacture a new tire design).

      * I won't spoil it for anyone that wasn't watching, but a snoozer was turned into an exciting finish to the race.

      (Yes, I know you were talking about a different kind of race, couldn't resist.)

      • (Score: 0) by Anonymous Coward on Friday August 07 2020, @10:30PM (1 child)

        by Anonymous Coward on Friday August 07 2020, @10:30PM (#1033216)

        F1 as a spectator sport is a garbage.

        Even Nascar circuit is better than F1.

        WRC is where it's at.

        • (Score: 0) by Anonymous Coward on Saturday August 08 2020, @01:41AM

          by Anonymous Coward on Saturday August 08 2020, @01:41AM (#1033278)

          Mille Miglia

          An amazing rally race with the most beautiful cars ever made.

          https://en.wikipedia.org/wiki/Mille_Miglia [wikipedia.org]

    • (Score: 1) by fustakrakich on Friday August 07 2020, @10:37PM

      by fustakrakich (6150) on Friday August 07 2020, @10:37PM (#1033224) Journal

      no Sunday NFL (which has been garbage for long time already.)

      Yeah, just hasn't been the same since '79

      --
      La politica e i criminali sono la stessa cosa..
  • (Score: 3, Interesting) by Snotnose on Friday August 07 2020, @10:23PM

    by Snotnose (1623) on Friday August 07 2020, @10:23PM (#1033209)

    Before I retired the RISKS digest was a big thing. Plus /. several times a day. Soylent didn't exist then. I kept on top of all of them. And hey, none of the code I've written has, AFAIK, ever been hacked.

    Why?

    No backdoor passwords. User input always got checked, albeit mismatches might have been more a "dafuq" than "we're being hacked". Pretty much everything got error checked, and errors killed the transaction.

    I suspect that the MBAs in charge would now call me a bad employee and fire me at the first layoff.

    --
    Relationship status: Available for curbside pickup.
(1)