26-11-2016, 05:58 PM
Yes they can!
Not connecting the ethernet or WiFi is the only safe route.
There are several different issues:
1) Routers often have uPNP enabled. It's evil and flawed like autorun, NEVER should have been in ANY router. Gadgets use uPNP to open inward connections. The gadget can be then "taken over" without you ever knowing. Coffee Makers, TVs, Kettles then can give away your WiFi password. People publish maps of them!
2) Vulnerable things can be used as part of botnets to DDOS (attack web sites or DNS or eMail etc making them unavailable). The user doesn't notice as the traffic per gadget is low.
3) Your PC often has vulnerable services protected from the Internet by your router, a vulnerable IoT or "smart" gadget combined with uPNP gives a way for miscreants to get to your local network (WAN). Typically people are attacked within 2 minutes. You never know, because modern Viruses, Trojans, root kits etc are only used to make botnets or steal financial data, only Ransomware is obvious to user (your PC gets encrypted and you have to pay for a key).
4) Privacy. Your speech (or data, or face via camera) is sent to third parties. Google & Facebook make money from that, but so do others.
There is NO cost or penalty to maker with weak security.
Mattel has a Barbie with insecure WiFi and everything it hears is sent to a 3rd party server. It responds with appropriate phrases.
Amazon's Echo still listens even when not commanded.
If you buy a smart TV or IoT (Internet appliance), make sure your WiFi /Router has uPNP disabled, and does not have default WiFi or admin passwords. Do not use it with a Phone App. Do not connect it to your WiFi or ethernet.
Tesla cars can be hijacked via the phone App.
The Philips lamps can be hijacked and then infect others in range.
If you MUST insanely use the Internet feature of a TV, Tape over cameras and drill microphone. Disable all uPNP on router. Better to use a phone/Tablet/laptop/PS4 with HDMI to play YouTube / Home media / Netflix etc on it.
I'm seriously not being paranoid, you can't imagine how bad this has got!
Not connecting the ethernet or WiFi is the only safe route.
There are several different issues:
1) Routers often have uPNP enabled. It's evil and flawed like autorun, NEVER should have been in ANY router. Gadgets use uPNP to open inward connections. The gadget can be then "taken over" without you ever knowing. Coffee Makers, TVs, Kettles then can give away your WiFi password. People publish maps of them!
2) Vulnerable things can be used as part of botnets to DDOS (attack web sites or DNS or eMail etc making them unavailable). The user doesn't notice as the traffic per gadget is low.
3) Your PC often has vulnerable services protected from the Internet by your router, a vulnerable IoT or "smart" gadget combined with uPNP gives a way for miscreants to get to your local network (WAN). Typically people are attacked within 2 minutes. You never know, because modern Viruses, Trojans, root kits etc are only used to make botnets or steal financial data, only Ransomware is obvious to user (your PC gets encrypted and you have to pay for a key).
4) Privacy. Your speech (or data, or face via camera) is sent to third parties. Google & Facebook make money from that, but so do others.
There is NO cost or penalty to maker with weak security.
Mattel has a Barbie with insecure WiFi and everything it hears is sent to a 3rd party server. It responds with appropriate phrases.
Amazon's Echo still listens even when not commanded.
If you buy a smart TV or IoT (Internet appliance), make sure your WiFi /Router has uPNP disabled, and does not have default WiFi or admin passwords. Do not use it with a Phone App. Do not connect it to your WiFi or ethernet.
Tesla cars can be hijacked via the phone App.
The Philips lamps can be hijacked and then infect others in range.
If you MUST insanely use the Internet feature of a TV, Tape over cameras and drill microphone. Disable all uPNP on router. Better to use a phone/Tablet/laptop/PS4 with HDMI to play YouTube / Home media / Netflix etc on it.
I'm seriously not being paranoid, you can't imagine how bad this has got!
