Exclusive: Popular Baby Monitor Wide Open to Hacking

guest · Feb 26, 2020

Exclusive: Popular Baby Monitor Wide Open to Hacking
February 26, 2020
https://uk.pcmag.com/home-security-...ive-popular-baby-monitor-wide-open-to-hacking

. Just be aware that if you’re using an iBaby Monitor M6S to keep tabs on the little one, you may be putting on a free show for total strangers. Researchers at Bitdefender discovered multiple security problems with this device that would allow hackers to grab any saved pics or videos, view live video, and even capture your personal information.

Most shocking of all, anybody who has one of these devices and the necessary network skills can access cloud-stored videos and pictures uploaded by every other device of the same type.
This discovery is the result of an ongoing partnership between PCMag and the Internet of Things security team at Bitdefender.

For a more detailed run-down of the problem, you can go to Bitdefender's blog post. And if you want to experiment with the vulnerability yourself (staying within the law, of course), Bitdefender's whitepaper offers the full details, the same details they supplied to iBaby's developers roughly nine months ago.
Click to expand...

All Your Baby Videos Are Belong to Us
Like a vast number of other companies, iBaby relies on Amazon Web Services for cloud storage.
Alerts are protected with a secret key and an access ID key. Sounds safe, right?

The problem is that the two keys don't just give the monitor access to your own cloud data; they let you see everyone's data.
That means any ne’er-do-well can purchase an iBaby monitor and use it to access files from every iBaby monitor. Unbelievable? Believe it.
Click to expand...

Bitdefender: Severe Vulnerability in iBaby Monitor M6S Camera Leads to Remote Access to Video Storage Bucket

guest · Feb 27, 2020

The case against smart baby tech
February 26, 2020
https://www.vox.com/recode/2020/2/26/21152920/ibaby-hacking-smart-baby-monitors-bitdefender

Smart baby monitors are increasingly popular targets for hackers
This potential for abuse is perhaps what makes smart baby monitors such attractive targets to bad actors, and it’s also why repeated instances of lax security features on baby monitors are so unsettling.
In recent years, smart baby monitor vulnerabilities and the hacks they make possible have made quite a few headlines.

“It’s not easy to say why some of the cameras don’t do a better job of protecting user’s data,” David Choffnes, an associate professor in computer science at Northeastern University who has studied smart camera security, told Recode.
“In the end, many consumers purchase devices based on price, not security,” Choffnes added. “Until that changes, the incentives are not in place to have more security by default.”
Click to expand...

But if after all of this, your heart is still set on a smart baby monitor or sock, try to find a device that lets you set your own password and offers two-factor authentication. Also, be sure to keep current with security updates, since they may include vulnerability patches.

Choffnes, the security camera expert, doesn’t use an internet-connected baby monitor for his toddler.

“Given the potential risks of devices being hacked — and the numerous news stories about it happening — and the lack of any benefits I perceive from having an internet connection, I can’t justify purchasing such devices,” Choffnes said. “Except for testing in my lab.”
Click to expand...

Log in or Sign up

Exclusive: Popular Baby Monitor Wide Open to Hacking

guest Guest

guest Guest

Log in or Sign up

Exclusive: Popular Baby Monitor Wide Open to Hacking

guest Guest

guest Guest

Useful Searches