Home Internet Security
On May 14th, 2018, BBC’s Panorama highlighted home Internet security vulnerabilities in people’s homes. It showed white hat hackers accessing home systems using a laptop in a van parked nearby and gaining access to the smart devices in the house. These included a smart television, lighting, curtains, central heating, and a printer, and they were able to order an iPad using the TV to access Alexa.
Another family had installed security cameras throughout the house but was unaware that these were viewable by strangers over the internet. In one case a camera had been viewed for 9 hours by someone in France. The BBC found cameras online, which were monitoring babies sleeping and viewable by anyone. Watching other peoples, CCTV is not even illegal, and people are unwittingly compromising their security while trying to enhance it.
To watch the program on iPlayer follow this link to Panorama, Hacked: Smart Home Secrets: via @bbciplayer
Reasons for insecure products
Companies design consumer products to be as cheap as possible. Commercial pressures to get them to market means cutting corners. Security is less tangible than features, so it is an area likely to be inadequate. Companies want to reduce their costs, so don’t want to handle user support issues as that costs them money. The result is setting default settings to plug and play. Plug and play will work out of the box but is unlikely to be secure.
Most of these products need regular firmware updates which are released by manufacturers to fix security problems and improve functionality. Some manufacturers don’t bother as it is another cost. If they discover a serious flaw, they say the product is “end of life” to avoid fixing the problem.
Most low-cost home products are made in the Far East and rebadged by other companies so getting support for these is difficult or impossible.
What you should do
When buying products for the Internet of Things carefully research what you are buying and check if good quality documentation is available in your language. Check if support is available if you have problems and if the company releases firmware updates for its products. The cheapest is unlikely to have any of these things, so avoid buying anything which is going to cause you a problem. Change any default passwords and make sure your devices are not making outbound connections by checking your router’s firewall logs.
Atomik.biz offers security audits as well as advice and installation services for homes in the Leighton Buzzard area and can carry out any work necessary to make your systems secure.
For help securing your home network
Telephone: 01525 540041 or 020 33271747