Samsung Smart Home flaws let hackers make keys to front door

guest · Jul 2, 2019

Samsung Smart Home flaws let hackers make keys to front door
Don't rely on SmartThings for anything security related, researchers warn
July 2, 2019
https://arstechnica.com/information...e-flaws-lets-hackers-make-keys-to-front-door/

Computer scientists have discovered vulnerabilities in Samsung's Smart Home automation system that allowed them to carry out a host of remote attacks, including digitally picking connected door locks from anywhere in the world.

The attack, one of several proof-of-concept exploits devised by researchers from the University of Michigan, worked against Samsung's SmartThings, one of the leading Internet of Things (IoT) platforms for connecting electronic locks, thermostats, ovens, and security systems in homes.

"All of the above attacks expose a household to significant harm—break-ins, theft, misinformation, and vandalism," the researchers wrote in a paper scheduled to be presented later this month at the 2016 IEEE Symposium on Security and Privacy.

The attack worked by obtaining the OAuth token that the app and SmartThings platform relied on to authenticate legitimate users. The only interaction it required was for targeted users to click on an attacker-supplied HTTPS link that looked much like this one that led to the authentic SmartThings login page.
Click to expand...

Log in or Sign up

Samsung Smart Home flaws let hackers make keys to front door

guest Guest

Log in or Sign up

Samsung Smart Home flaws let hackers make keys to front door

guest Guest

Useful Searches