ZeroHour
Schneier on Securitypublished ()ingested

Security Analysis of the LIFX Smart Light Bulb

mediumVulnerabilityimportance 30
Full article93 words · extracted from schneier.com · click to collapse

The security is terrible:

In a very short limited amount of time, three vulnerabilities have been discovered:

  • Wifi credentials of the user have been recovered (stored in plaintext into the flash memory).
  • No security settings. The device is completely open (no secure boot, no debug interface disabled, no flash encryption).
  • Root certificate and RSA private key have been extracted.

Boing Boing post.

Tags: Internet of Things, passwords, vulnerabilities, Wi-Fi

Posted on January 30, 2019 at 10:00 AM30 Comments

Sidebar photo of Bruce Schneier by Joe MacInnis.

Text extracted automatically; images, tables and formatting may be missing. Original: https://www.schneier.com/blog/archives/2019/01/security_analys_6.html