Cloudflare presents a primer on "anti-patterns" that have transformed IoT devices into ghastly security nightmares.
This JSON request instructs the alarm clock on every “alarmSound” event to send a HTTP request to the coffee machine. Whilst this may seem a simple and effective way of implementing the Pub/Sub pattern in HTTP, this poses a significant security risk.
By not being able to validate if the receiver of the subscribed message wants the message or not, there is effectively a DDOS vulnerability. An attacker with the ability to set subscriptions on the alarm clock can effectively send HTTP messages to any device or internet property they want. If this is done across enough devices, a DDOS vulnerability is created.
Toast popping out of a toaster or a car driving across a road traffic sensor could be the trigger of a future large scale DDOS against a web property.
IoT Security Anti-Patterns
[Junade Ali/Cloudflare]
(via 4 Short Links)
Journalist’s Resource published this great comic by Josh Neufeld, explaining the basic concepts behind differential privacy, the data collection method used to prevent bad actors from de-anonymizing the information gleaned from the 2020 Census. The original source includes some other great resources on differential privacy, but since the comic itself is made available under a […]
Last spring, a Baltimore underwent a grinding, long-term government shutdown after the city's systems were hijacked by ransomware. This was exacerbated by massive administrative incompetence: the city had not allocated funds for improved security, training or cyberinsurance, despite having had its emergency services network taken over by ransomware the previous hear, and five city CIOs […]
I’m not the kind of person who possesses the programming or IT knowledge to run my own servers and host my own email. But I can manipulate some things on the internet or on local networks, like how to access the gateway to your router and make some changes in there, even if I […]
We’ve all been cooped up in the house for way too long. Even though we’re all trying to be more health-conscious these days, the confinement is likely doing a number on both the physical and psychological health of millions. Young or old, male or female, it’s time for many to take some proactive steps toward […]
At some point in the future, global communications networks will likely reach one standardized protocol that everyone uses. If you look back over the past few decades, there’s a decent chance that when the story of digital networking is finally settled once and for all, it’s Cisco and Cisco-based systems that the globe will be […]
We’ve all grown accustomed to the new world order. And until we can go out and experience the world again like we used to, we’ll settle for the next best thing: bringing the world to our door. And if ever there was a time for wine (and lots of it), it’s now. So even if […]
