Great Expectations (or, A Tale Of Two Kettles)
summary
Describes how early iKettle V1/V2 used local sockets with no encryption so SSID spoofing and readable config pages expose network credentials and personal data, risking secondhand-device leaks; outsourcing left security assumptions unvalidated. Details a complete ground-up rewrite (two and a half products worth), building an internal team, adding server-side capabilities and factory firmware update support, and adopting the Electric Imp platform as the secure backbone — the rebuilt platform is live and used for the current kettle and coffee products.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 2:36Connected kettle purpose
- 5:50Security flaws in the first generation kettle
- 12:18Past security repercussions
- 16:30Lessons from failures
- 20:25Outsourcing security challenges
- 23:27Rebuilding securely
- 27:17Next speaker
related talks
09mDigital Product
30mVulnerabilities in the Internet of Things
48mSecuring The Internet Of Things
31mEcosystem, Interoperability and Standards: IoT Security
45mThe Bulb That Knew Too Much: A Journey into IoT Security
30mHousehold INFOSEC in a Post-Sony Era #bbuzz
43mKeynote: Security Under the BEAM
41mJust Another Live Hacking - How Insecure Is Secure Enough?