I get a little nervous about my Pixel watch. None of those watches have been updated since November and there are likely some juicy CVEs hanging out on them.
Bad Smart Watch Authentication
31–36 of 36 posts
Re: Bad Smart Watch Authentication
#32I get a little nervous about my Pixel watch. None of those watches have been updated since November and there are likely some juicy CVEs hanging out on them. https://developers.google.com/android/ota-watch
"My watch is a security risk and my refrigerator uses 3 gigabytes of data a day."
"I can't access my todo list because azure is down"
We should go back to analog. We're wasting our time.
Re: Bad Smart Watch Authentication
#33Now, I'm not going to say this is great, but honestly it seems pretty close to a "who cares?" situation. We are talking about a device with no internet connection that can only be accessed by someone in the same proximity to yourself. Perhaps don't buy this watch if you live in a crowded location and take public transport a lot. For everyone else, seems really unlikely that the people you interact with will have setu…
> who cares
I hear this a lot.
Yet those same people suddenly do care when their personal information (or that of their wife/girlfriend/child) ends up all over the internet.
Re: Bad Smart Watch Authentication
#34Now, I'm not going to say this is great, but honestly it seems pretty close to a "who cares?" situation. We are talking about a device with no internet connection that can only be accessed by someone in the same proximity to yourself. Perhaps don't buy this watch if you live in a crowded location and take public transport a lot. For everyone else, seems really unlikely that the people you interact with will have setu…
ApplePay is a major use case for my Apple Watches. Don't Android watches use the Google equivalent, however that is branded at the moment?
Another use case is using the watch to unlock other devices. That also seems security sensitive.
And some people may be uncomfortable about the health data that could be extracted from such a watch.
Re: Bad Smart Watch Authentication
#35Now, I'm not going to say this is great, but honestly it seems pretty close to a "who cares?" situation. We are talking about a device with no internet connection that can only be accessed by someone in the same proximity to yourself. Perhaps don't buy this watch if you live in a crowded location and take public transport a lot. For everyone else, seems really unlikely that the people you interact with will have setu…
ApplePay is a major use case for my Apple Watches. Don't Android watches use the Google equivalent, however that is branded at the moment? Another use case is using the watch to unlock other devices. That also seems security sensitive. And some people may be uncomfortable about the health data that could be extracted from such a watch.
> I'd only suggest that if the watch supports putting a credit card on it that you rethink doing that.
I'm not giving these watches a ringing endorsement. I wouldn't buy or wear one.
I'm just saying the authentication system isn't super dire.
Re: Bad Smart Watch Authentication
#36Now, I'm not going to say this is great, but honestly it seems pretty close to a "who cares?" situation. We are talking about a device with no internet connection that can only be accessed by someone in the same proximity to yourself. Perhaps don't buy this watch if you live in a crowded location and take public transport a lot. For everyone else, seems really unlikely that the people you interact with will have setu…
> who cares I hear this a lot. Yet those same people suddenly do care when their personal information (or that of their wife/girlfriend/child) ends up all over the internet.
The extent of the personal data is what you put on the watch.
Anonymous heart rate data simply isn't interesting to anyone. You won't find any dark net health statistics.