Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 18 submissions in the queue.
posted by Fnord666 on Monday July 19 2021, @04:52PM   Printer-friendly
from the pwned dept.

For years, a backdoor in popular KiwiSDR product gave root to project developer:

KiwiSDR is hardware that uses a software-defined radio to monitor transmissions in a local area and stream them over the Internet. A largely hobbyist base of users does all kinds of cool things with the playing-card-sized devices. For instance, a user in Manhattan could connect one to the Internet so that people in Madrid, Spain, or Sydney, Australia, could listen to AM radio broadcasts, CB radio conversations, or even watch lightning storms in Manhattan.

On Wednesday, users learned that for years, their devices had been equipped with a backdoor that allowed the KiwiSDR creator—and possibly others—to log in to the devices with administrative system rights. The remote admin could then make configuration changes and access data not just for the KiwiSDR but in many cases to the Raspberry Pi, BeagleBone Black, or other computing devices the SDR hardware is connected to.

Archived copy of the story.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 3, Interesting) by JoeMerchant on Monday July 19 2021, @05:49PM

    by JoeMerchant (3937) on Monday July 19 2021, @05:49PM (#1157961)

    I know for a fact that our desk phones at a particular company I worked for were capable of undetectable audio monitoring of any room they were in: no lights, no clicks, doesn't matter if the phone is in use or not.

    I also openly discussed that fact and other things you wouldn't say to the CEOs face in public, not to piss him off, but because A) they don't really have the wetware bandwidth to listen to every hour of noise in every mid level engineer's office, and B) anything they did hear they couldn't openly acknowledge hearing without acknowledging that they are listening to their employees covertly. Whether it's legal or not, that would be really bad for morale.

    They never acknowledged hearing anything that was said, if they ever did my response would have included the prepared phrase: "well, I'm honored that you think me worthy of listening to like that."

    --
    🌻🌻 [google.com]
    Starting Score:    1  point
    Moderation   +1  
       Interesting=1, Total=1
    Extra 'Interesting' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   3