Smart home systems are perverted sex videossupposed to make our lives easier and safer -- but some of the most popular connected security cameras could make your place an easy target if your neighborhood is visited by a tech-savvy burgling crew.
Security researcher Jason Doyle recently published a set of three vulnerabilities he found in Google's Nest cameras. The flaws, which take advantage of the camera system's always-on Bluetooth, allow anyone within the devices' Bluetooth Low Energy (BLE) range to overwhelm them and shut them down.
Doyle claims he reported the flaws to Google back in October when he first found them, but the company has yet to offer any updates to fix the issues. He decided to go public with the information last week to inform Nest users of their potential vulnerability.
SEE ALSO: Ultimate Zelda superfan rigs smart home to respond to ocarinaModels affected by the vulnerabilities include the Dropcam, Dropcam Pro, Nest Cam Outdoor and Nest Cam Indoor running version 5.2.1 of Nest's firmware.
The first two flaws can be exploited by sending the camera overlong Wi-Fi SSID parameters or a encrypted password parameters. This triggers a buffer overflow condition, which causes the cameras to stop recording, crash and reboot.
The third flaw is a bit different: it knocks the camera from its connected Wi-Fi network entirely. Attackers can bombard the camera with a new SSID connect to, which knocks it off its network as it attempts to join the new one. The process takes about 90 seconds before the original Wi-Fi connection resets -- but if the attack is repeated on a loop, the security system is rendered useless.
Doyle told us these flaws aren't all that rare in the smart products that are coming to our homes as the Internet of Things (IoT) grows and evolves. "I've recently been interested in how IoT products were implementing the newer Bluetooth LE specification," he said via email. "I tested several home automation products, from cloud cameras like Google's Nest Cam to Bluetooth-enabled pressure cookers; and my results were a bit disconcerting."
He said some connected home products that use Bluetooth don't have much to offer in the security department at all -- but the Nest isn't the worst of them. "The Nest cam does have some well-thought-out security measures in place but their implementation obviously had a few shortcomings," he said.
Doyle also stressed that leaving Bluetooth on isn't the issue at hand here -- but it's important that makers of these connected devices lock those systems down.
"While leaving it on has functional advantages it also increases the attack surface and presents more options to an attacker," he said. "If they need it for some other integrations then it makes sense as long as they do their due diligence in securing the implementation."
A Nest rep acknowledged the existence of the flaws to us via email, but assured us a patch is on the way. "Nest is aware of this issue, developed a fix for it, and will roll it out to customers in the coming days," they said.
Until then, Nest owners would be smart to depend on the sturdiest old-school security systems their homes have to offer: a strong set of locks.
Topics Cybersecurity Google Cameras
Revolut finally launches debit card and app in the United StatesTesla buys 1,255 ventilators from China and delivers them to Los Angeles'The Office': 10 best behindDonald Trump made one big mistake in his birthday tweet to MelaniaMan's tweet about pie charts being useless causes hilarious chaosDaughter tweets her mom's brilliant plan to screw over a Trump rallyHow to date someone who snoresDavid Attenborough lying next to a dinosaur bone gets ridiculous Photoshop battleApple's iPhone 12 might be 'months' lateDaughter tweets her mom's brilliant plan to screw over a Trump rallyCaitlyn Jenner says she'd consider a run for public office to the collective sigh of the worldApple is hoping to start reopening stores in the first half of AprilEverything coming to HBO Now in April 2020It turns out CPR will bring a drowned lizard back to life. A couple of times.Triscuit confirms that its name *does* stand for 'electricity biscuit'Light up the John Oliver signal: The battle over Net Neutrality is backThis mom apparently takes photocopies of recipes on her iPad and you know what? It's good.How to use social distancing to get closer to your friends and familyZoom party tips for the age of coronavirusTriscuit confirms that its name *does* stand for 'electricity biscuit' Little girl gives her pet chicken a glamorous makeover Celebrate 10,000 days of the world wide web with a trip down memory lane Hillary Clinton's presidential campaign hacked Australia is officially, once and for all, ditching its tampon tax Perfect gifts for the inconsolable 'Parks and Rec' fans in your life Donald Trump portrayed as ultimate Hollywood movie villain The flower crown just got an upgrade: Mermaid crowns are making a splash 6 badass facts you might not know about Beatrix Potter Serena Williams shows different side of domestic violence in chilling video 'That's what I'm talking about:' Bill Clinton loved Barack Obama's speech Uplifting new hashtag celebrates black women's accomplishments Milo Ventimiglia couldn't finish reading 'The Fountainhead,' either Elon Musk's current reading is kind of exactly what you'd expect Apple's iOS 12.1 to bring new emoji, iPhone XS charging fix Microsoft challenges Apple with $899 Surface Pro, $999 Surface Laptop 2 Real shark took a real bite out of retired NFL player Warren Sapp This is the OnePlus 6T Beyond Hillary: 10 powerful speeches by women at the Democratic Convention Facebook: No evidence ‘so far’ that hackers accessed third We made a bracket to figure out the biggest TV villain
3.2958s , 10519.5234375 kb
Copyright © 2025 Powered by 【perverted sex videos】,Inspiration Information Network