Smart Vacuum Security Flaws May Leave Users Exposed

guest · Feb 26, 2020

Hackers can peep through this smart vacuum's camera, research shows
February 25, 2020
https://www.cnet.com/news/hackers-can-peep-through-this-smart-vacuums-camera-research-shows/

The Trifo Ironpie robot vacuum is designed to do double duty. The fans on the swiveling disc hoover your house, while the camera mounted on it acts as an ankle-high security camera. The idea is to stay tidy while staying safe.

There's just one problem, according to cybersecurity firm Checkmarx. The Ironpie has multiple security vulnerabilities.
The flaws found in Ironpie, which is internet connected so owners can view its camera stream on an app, varied in severity. One of the worst would allow remote attackers to access users' video streams by accessing Trifo's servers.

If hackers got close enough to get on a user's Wi-Fi network, they could send control instructions to the device. The Ironpie data traveling along the network is also unencrypted, which means the software is missing a fundamental security protection. Finally, hackers could access the map Ironpie makes of an owner's house, which would provide information about how big it is or how many rooms it has.
Click to expand...

Because the flaws aren't fixed, Checkmarx is holding back technical details that could let attackers exploit the vulnerabilities.

"Every new connected device can open users to a host of security issues," said Erez Yalon, who contributed to Checkmarx's research.
Click to expand...

Checkmarx Research: Smart Vacuum Security Flaws May Leave Users Exposed

In this research, several vulnerabilities and bad coding practices were identified. Some of them were weak security implementations with no practical use cases, while others show profound misguidance regarding a serious security stance on a self-proclaimed security product, as was the case with Trifo.
Click to expand...

Log in or Sign up

Smart Vacuum Security Flaws May Leave Users Exposed

guest Guest

Log in or Sign up

Smart Vacuum Security Flaws May Leave Users Exposed

guest Guest

Useful Searches