4 ms·
Not to diminish the effort (I love seeing these things cracked): if you have physical access to an Alexa device you likely have access to the router as well. T
by notum 4y ago
Not to diminish the effort (I love seeing these things cracked): if you have physical access to an Alexa device you likely have access to the router as well.
The better coarse of action for a wrongdoer would be to get everything off the router using a serial interface and leave no traces behind for an extended remote access.
- voxadam 4y agoAs I mentioned in a reply to another comment there's a lifecycle issue to consider. People frequently upgrade their devices (IoT and otherwise) or dispose of them entirely. Often times these old devices are disposed of in insecure curbside trash bins. With every old IoT device being tossed into the trash without though it's starting to look like this is a more and more effective attack vector with each passing day.
- lxgr 4y agoThe "old device offered on the curb with a 'still working' note" threat scenario is actually a more realistic one than something like a corporate Wi-Fi in my view, since the latter would hopefully have any physically exposed client devices like that in a separate subnet/VLAN/SSID. The added benefit is that any possible attacker gets two additional data points for free: Where the corresponding SSID is most likely located, and that that household can afford to give away the hardware for free instead of reselling it or trading it in.
- JohnBooty 4y agothat that household can afford to give away the hardware for free instead of reselling it or trading it in The Echo Dot in the article retails for $40, cheap enough to be considered disposable by many/most. Would probably gain much more useful socioeconomic information simply by looking at the neighborhood in which said curb is located, right? :)