The Internet of Things and iOS: Don't let your toaster bring down the internet!
summary
Mirai botnet source code (public on GitHub) brute forces Telnet with default passwords and on Oct 21, 2016 knocks major services offline; Nest issues: a single thermostat change triggers 25 API calls (7 for analytics) across five hosts, Ecobee does ~19 calls across two hosts; cheap IoT gadgets and a Bluetooth vibrator upload sensitive payloads and spark lawsuits; recommended fixes include certificate pinning, keychain storage, local hub+CoAP/Zigbee designs (IKEA TRÅDFRI model), and LetsEncrypt-backed pinning for short-lived certs.
AI-written summary · about
chapters (33)
- 0:00Intro
- 1:29Florians background
- 3:16Motivation
- 5:08Growth rate
- 7:05Global perspective
- 7:58Historical perspective
- 8:39Connard Suzy
- 8:53Erics Altar
- 9:06iPhone
- 9:28Smart Toaster
- 10:24Smart Toaster apocalypse
- 12:29Mirai Source Code
- 14:39iOS Client Security
- 14:59Do you have a security camera
- 17:12Nest Thermostat
- 20:37Ecobee
- 21:04Ecobee API
- 21:59Belden Sensor
- 23:45Data Privacy
- 26:48Summary
- 29:04IoT device security
- 29:30Open standards
- 30:39IKEA
- 33:19MQTT
- 33:49Data Security
- 34:09The Binary Number
- 39:02Its up to us
- 39:28Takeaways
- 40:08How to be a hacker
- 41:01Risk assessment
- 41:52Take responsibility
- 42:12Trust
- 42:59Lessons learned
related talks
30mVulnerabilities in the Internet of Things
13mThe dark side of IoT
51mThings That Go Bump in the Night: Detecting Problems in the Internet of Things
01h 01mThe Internet of Pwned Things
25mThe Ethics of the Internet of Things
40mInto the Mind of an IoT Hacker | How to Protect IoT Networks & Devices
49mxIoT Hacking Demonstrations & Strategies to Disappoint Bad Actors
33mThe Internet of (Better) Things