Because of the limitations, this hack isn’t something that represents a real or immediate threat, at least as long as current models (the one Hron used is older) don’t use encryption, authentication, or code signing.
The hack is a thought experiment designed to explore what’s possible in a world where coffee machines, refrigerators, and all other manner of home devices all connect to the Internet. One of the interesting things about the coffee machine hacked here is that it’s no longer eligible to receive firmware updates, so there’s nothing owners can do to fix the weaknesses Hron found.
Additionally, this case also demonstrates one of the most concerning issues with modern IoT devices: “The lifespan of a typical fridge is 17 years, how long do you think vendors will support software for its smart functionality?” Sure, you can still use it even if it’s not getting updates anymore, but with the pace of IoT explosion and bad attitude to support, we are creating an army of abandoned vulnerable devices that can be misused for nefarious purposes such as network breaches, data leaks, ransomware attack and DDoS.
See When coffee makers are demanding a ransom, you know IoT is screwed
#technology #iot #security #cloud
Watch along as hacked machine grinds, beeps, and spews water.