31–40 of 41 posts
Earlier quoted context omitted.
Maybe there is a firewall? Lots of people put smart bulbs on their own subnet that is cut off from the internet.
Five people tops. Maybe six.
I'd never have thought that I'd need to put my audio speakers and bathroom scale behind a firewall would be a thing, but it's 2018 and here we are.
I threw my smart lightbulbs out entirely.
How many engineers do you need to change a smart light bulb? Seriously, I don't know...
Q: How many Northern Californian software engineers does it take to change a smart lightbulb?
A: Hella!
Q: How many Southern Californian software engineers does it take to change a smart lightbulb?
A: Totally!
https://escholarship.org/uc/item/6492j904
http://www.sonomastatestar.com/opinion/2014/11/4/hella-nor-c...
http://prizedwriting.ucdavis.edu/sites/prizedwriting.ucdavis...
Earlier quoted context omitted.
Heck, drop a smart bulb in the parking lot...
This might sound too obvious to work but I know a non-zero number of people who picked up lightbulbs and plugged them in at home.
https://en.wikipedia.org/wiki/Kevin_Poulsen
https://archive.org/stream/JustinTannerPeterson/1346919-0_-_...
>A couple of hours later, Neal accompanied Poulsen to his condominium down the street from SRI. Against one wall stood a six-foot-long phone monitoring station. Strewn on the floor or stuffed in the closet were line-testing equipment, trunk test sets, telecommunication panels, terminals, monitors, cables and a switching device. At the same time that he had an SRI security clearance, Poulsen had been pulling nighttime burglaries on Pacific Bell facilities, stealing manuals, passwords, anything that might provide access, the San Jose indictment charged. The handful of books and papers ranged from "How to Buy Stocks" to a copy of "Watchmen," a violent comic book scries, to a bright yellow report binder that might have been scribbled by an eighth-grader but for its title. "Burglar Alarm Procedures."
>A police photograph taken at the scene showed Poulsen leaning against the door, a sour look on his long face. "I had him sign a copy of what we were taking away," says Neal. "I think he finally realized there wasn't going to be an easy way out."
Earlier quoted context omitted.
Five people tops. Maybe six.
O HAI, other four people, maybe five. I'd never have thought that I'd need to put my audio speakers and bathroom scale behind a firewall would be a thing, but it's 2018 and here we are. I threw my smart lightbulbs out entirely.
Smart move. Perhaps I'm becoming a dinosaur (at the tender age of 34 no less!) but I genuinely never saw the appeal of these things.
Earlier quoted context omitted.
O HAI, other four people, maybe five. I'd never have thought that I'd need to put my audio speakers and bathroom scale behind a firewall would be a thing, but it's 2018 and here we are. I threw my smart lightbulbs out entirely.
> I threw my smart lightbulbs out entirely. Smart move. Perhaps I'm becoming a dinosaur (at the tender age of 34 no less!) but I genuinely never saw the appeal of these things.
I dont try to turn the lights on remotely or any of those features. I have taken steps to prevent them from being online. I know this works because the app is constantly reminding me that it cant check for updates.
Earlier quoted context omitted.
O HAI, other four people, maybe five. I'd never have thought that I'd need to put my audio speakers and bathroom scale behind a firewall would be a thing, but it's 2018 and here we are. I threw my smart lightbulbs out entirely.
> I threw my smart lightbulbs out entirely. Smart move. Perhaps I'm becoming a dinosaur (at the tender age of 34 no less!) but I genuinely never saw the appeal of these things.
Earlier quoted context omitted.
TBH a a network with intrusion detection or firewalls doesn't really go in the same room as a smart bulb. You don't build a secure network and then say "hey, I should put some fun into it" :).
Nonsense. As smart light bulbs get even cheaper and more likely, the chances of them being used to achieve useful ends, like automatically dimming up and down as daylight requires, turning off when not needed at light-level instead of room-level, et cetera, rises. Once they're cheaper than alternative methods of doing that they _will_ be used, and eventually you _will_ get a smart bulb on an airgapped network.
It doesn't make sense to build a secure network and then connect insecure crap to it or to allow anyone else to do it.
Earlier quoted context omitted.
TBH a a network with intrusion detection or firewalls doesn't really go in the same room as a smart bulb. You don't build a secure network and then say "hey, I should put some fun into it" :).
You'd be surprised. Also, who says the bulb was deposited there by security experts.
A smart light bulb usually needs some additional "infrastructure": the bridge that has to be connected somehow. Even if you made the mistake of not physically securing the ports of your secure network, and also don't authenticate any device that connects, and you somehow allow random devices to be connected to a secure [0] network, you'll still be able to catch any device that gets connected. And if your bulb somehow goes straight to WiFi why would you allow random devices on that network?
[0] Did I mention secure enough times? I just have the feeling that this is the crux of the discussion because you consider setting up firewalls and IDS that block any exfiltration as normal but somehow a smartbulb on the network doesn't raise any flags.
Earlier quoted context omitted.
Nonsense. As smart light bulbs get even cheaper and more likely, the chances of them being used to achieve useful ends, like automatically dimming up and down as daylight requires, turning off when not needed at light-level instead of room-level, et cetera, rises. Once they're cheaper than alternative methods of doing that they _will_ be used, and eventually you _will_ get a smart bulb on an airgapped network.
I'll just repeat myself, maybe the finer points were missed: If you set up a secure network with IDS and firewalls, you control all aspects of that network. Saying that you'll put some IoT smart bulb crap on that network is just like saying you have an airgapped network that's connected to the internet. It doesn't make sense to build a secure network and then connect insecure crap to it or to allow anyone else to do…
You're thinking too current. There's no reason why an "industry" smartbulb won't exist in the not too distant future, with hardened security and professional use cases. This study is flagging up that even with hardened security there are new attack vectors.