Vulnerabilities in the Internet of Things
summary
A series of consumer devices reveal concrete failures: an internet kettle exposes its AT command console with a 000000 default PIN and commands that leak the WPA pre‑shared key; a coffee machine uses an ESP8266 on port 2081 and accepts simple ASCII commands that can force firmware update loops or waste coffee; a brute‑force attack with Hydra recovers PINs in under four hours; dolls and toys accept unauthenticated Bluetooth or ship encrypted databases with a static client key; TVs and a fridge send sensitive data without proper TLS or certificate validation.
AI-written summary · about
chapters (23)
- 0:00IoT security flaws
- 1:13Why IoT devices are vulnerable
- 2:16Hacking Wi-Fi kettle
- 5:48Extracting Wi-Fi keys
- 7:54Stolen Wi-Fi credentials
- 10:02Reverse engineering coffee machine
- 12:48Remote control & DoS
- 14:12Smart ski goggles flaws
- 15:13Hacking interactive doll
- 17:39Kayla swearing demo
- 18:43Kayla app weak encryption
- 19:04Hello Barbie security
- 20:06Samsung TV privacy issues
- 21:10Testing Samsung TVs
- 22:13Exploiting smart fridge
- 23:14Hoover smart home flaws
- 24:36Hoover app weak encryption
- 24:57Fitbit scales security
- 25:59Finding IoT interfaces
- 26:20Wi-Fi tank hardcoded creds
- 26:42IoT adult toys risks
- 28:08Improving IoT security
- 29:10Engaging researchers
related talks
23mSmart Devices Gone Rogue: IOT Vulnerabilities and Designing For Security
46mThe Internet of Things and iOS: Don't let your toaster bring down the internet!
13mThe dark side of IoT
48mSecuring The Internet Of Things
01h 06mBackdoors in Back Doors
59mThe Internet of Pwned Things
32mCommon Attacks on IoT Devices
51mThings That Go Bump in the Night: Detecting Problems in the Internet of Things