{"id":37035,"date":"2013-12-02T12:00:44","date_gmt":"2013-12-02T12:00:44","guid":{"rendered":"http:\/\/www.transcend.org\/tms\/?p=37035"},"modified":"2015-05-05T22:20:15","modified_gmt":"2015-05-05T21:20:15","slug":"can-you-hack-it-everything-electronic-you-own-can-be-hacked","status":"publish","type":"post","link":"https:\/\/www.transcend.org\/tms\/2013\/12\/can-you-hack-it-everything-electronic-you-own-can-be-hacked\/","title":{"rendered":"Can You Hack It? Everything Electronic You Own Can Be Hacked"},"content":{"rendered":"<p><i>So How to Defend Yourself?<\/i><\/p>\n<p>Wherever you\u2019re sitting right now, take a moment to note the connected devices around you. In your pocket or handbag, you probably have an electronic key fob and perhaps a rechargeable subway card embedded with RFID. You likely have a smartphone, which is connected to a Wi-Fi network and also has voice-mail service. You might be wearing a <a href=\"http:\/\/www.amazon.com\/dp\/B008RRLJTO\/?tag=slatmaga-20\"  target=\"_blank\">Nike FuelBand<\/a>, or a <a href=\"http:\/\/www.amazon.com\/dp\/B0095PZHPE\/?tag=slatmaga-20\"  target=\"_blank\">Fitbit<\/a>, or possibly even a new pair of Google Glass. Maybe you can spot a traffic light or an orange highway sign out of your window. A power strip is likely not too far away.<\/p>\n<p>All of these devices share one thing in common: They can be hacked.<\/p>\n<p>As we herald the coming Internet of Things, it\u2019s easy to forget that our ever expanding tech playground is mostly unsupervised. There is no playground teacher to blow a whistle when another kid takes control of your Bluetooth headset. There is no Norton antivirus software for your garage door opener.<\/p>\n<p>If you can plug it in or connect it to a network, your device\u2014no matter what it is\u2014can be harnessed by someone else. And that someone doesn\u2019t have to be a Chinese superhacker to do some serious damage with it, either on purpose or by accident. It can be your Uncle Roger, who doesn\u2019t have his new iPhone figured out and is cluelessly turning your lights on and off via your <a href=\"http:\/\/www.amazon.com\/dp\/B00DGEGJ02\/?tag=slatmaga-20\"  target=\"_blank\">Belkin WeMo<\/a>.<\/p>\n<p>I\u2019m a hobbyist. Because I study emerging technology and the future of media, I\u2019m often tinkering, breaking things, and putting them back together. Once, I wanted to see if I could break into the protected Wi-Fi network we set up for my daughter at home. Less than an hour later, I\u2019d failed to penetrate her network but managed to shut down the main network for our house. Which I knew, because of my husband\u2019s sudden yelling upstairs: \u201cWhy is the IRS website redirecting to Sesame Street?!\u201d<\/p>\n<p>Part of what makes new technology so exciting is that, unlike the old days, it works right out of the box. You no longer need to know how to build a computer, connect a modem, run a terminal emulator, and install bulletin board system, or BBS, software in order to send a racy message to a co-worker. Now any tech idiot can download Snapchat and accidentally send a racy photo to his sister-in-law. The tech playground is more accessible and, as a result, increasingly problematic.<\/p>\n<p>Just after the annual <a href=\"http:\/\/www.blackhat.com\/us-13\/\"  target=\"_blank\">Black Hat<\/a> Internet security convention a few months ago in Las Vegas, I asked a group of my friends\u2014a Navy engineer, a professional hacker, and a hobbyist\u2014to help me come up with a quick list of devices that will be vulnerable during the next few years as the Internet of Things becomes widespread.<\/p>\n<p>Here\u2019s our (incomplete) list. (Entries with a * are those we\u2019ve tried hacking at home, for fun.):<\/p>\n<p><b>Obvious:<\/b><\/p>\n<p>smartwatches*<br \/>\nsmartphones*<br \/>\ncomputers*<br \/>\ntablets and phablets*<br \/>\nhome computer locks*<br \/>\nthe cloud (services, storage, software)<br \/>\nATMs at banks<br \/>\nprinters<br \/>\nGPS devices*<br \/>\nWi-Fi routers*<br \/>\nwebcams*<br \/>\nthumb and portable USB drives<br \/>\nhotel and gym safes (they tend to use a single default passcode)<br \/>\ncable box or DVR<br \/>\nvoice mail (especially those with a global call-in number that doesn\u2019t lock out after successive failed attempts\u2014we saw this with the <i>News of the World<\/i> scandal)<\/p>\n<p><b>Less Obvious:<\/b><\/p>\n<p>power strips (can be infected with malware)<br \/>\npower cords for your devices (code can be implanted)<br \/>\nluggage trackers (such as the <a href=\"http:\/\/www.amazon.com\/dp\/B00EYE5CAQ\/?tag=slatmaga-20\"  target=\"_blank\">Trakdot<\/a>)<br \/>\nconnected glasses (Google Glass, Oculus Rift. As of now, Google\u2019s QR barcodes for Wi-Fi store the full access point name and password as plain text)<br \/>\ngaming consoles: PS3, Kinect, Nintendo*<br \/>\nrefrigerators (such as Samsung)<br \/>\ncars with computer operating systems<br \/>\nsmart pens (like the Livescribe)<br \/>\ngesture control devices (such as the <a href=\"http:\/\/www.amazon.com\/dp\/B00E3CP9UM\/?tag=slatmaga-20\"  target=\"_blank\">Leap<\/a>)*<br \/>\nSD cards<br \/>\ncameras<br \/>\nsmart alarm clocks*<br \/>\ncoffee makers<br \/>\nkey fobs<br \/>\nlight switches*<br \/>\nmoisture sensors*<br \/>\nkitchen and pantry trackers (such as <a href=\"http:\/\/www.amazon.com\/dp\/B00GN92KQ4\/?tag=slatmaga-20\"  target=\"_blank\">Egg Minder<\/a>)<br \/>\ninsurance driving monitors, such as Progressive\u2019s Snapshot device<br \/>\ntraffic lights (<a href=\"http:\/\/www.themirt.com\/\"  target=\"_blank\">MIRT transmitters<\/a> can change lights to green in two to three seconds)<br \/>\nhighway signs <a href=\"http:\/\/www.truthistreason.net\/how-not-to-hack-a-road-sign-and-add-zombie-attack-detour\"  target=\"_blank\">that spell out text<\/a><\/p>\n<p><strong><i>And we didn\u2019t even get into medical devices, which are frighteningly exposed to mischief.<\/i><\/strong><\/p>\n<p><a target=\"_blank\" href=\"http:\/\/www.slate.com\/articles\/technology\/technology\/2013\/11\/hacking_iphones_google_glass_and_fitbits_how_to_protect_yourself_when_everything.html\" >Go to Original \u2013 slate.com<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>After the annual Black Hat Internet security convention a few months ago in Las Vegas, I asked a group of my friends\u2014a Navy engineer, a professional hacker, and a hobbyist\u2014to help me come up with a quick list of devices that will be vulnerable. Here\u2019s our (incomplete) list. (Entries with a * are those we\u2019ve tried hacking at home, for fun.).<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[62,60],"tags":[],"class_list":["post-37035","post","type-post","status-publish","format-standard","hentry","category-media","category-whistleblowing-surveillance"],"_links":{"self":[{"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/posts\/37035","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/comments?post=37035"}],"version-history":[{"count":0,"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/posts\/37035\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/media?parent=37035"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/categories?post=37035"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/tags?post=37035"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}