There are more and more smart home devices on the market, including sweeping robots, refrigerators, coffee machines, light bulbs, door locks, and even sockets. What most people care about about these products is whether they are easy to use and whether they are affordable. In fact, safety cannot be ignored. Recently, Security personnel abroad have demonstrated what will happen if a smart coffee machine is hacked by a hacker. It becomes completely unusable and the only option is to unplug it to prevent hackers from controlling it. If this happens to security-related smart home devices such as door locks and cameras, the consequences can be very serious.
Foreign security personnel demonstrate what will happen if a coffee machine is hacked
Recently, Martin Hron, a security researcher at Avast, used a $250 Smarter smart coffee machine to demonstrate the threats that smart home devices can pose if they are hacked.
This Smarter smart coffee machine had security issues in 2015, and the WiFi encryption key used in the first generation can be recovered. The second generation is not only the same, but also has other security issues, such as: no firmware signature and an unreliable security block in ESP8266. When the coffee machine is connected to WiFi, the data between it and the smartphone is not encrypted. The official firmware update program is also provided, which means that the update process is not encrypted, does not perform authentication, and does not perform code signing, thus allowing hackers to take advantage of it.
Hackers can push fake firmware updates to coffee machines through implanted malware, thereby controlling the entire coffee machine.
In the video, there is nothing wrong with the coffee machine at first, and the screen displays normally:
Martin Hron then implanted the malware into the coffee machine. When the user presses any key, the screen will display a head icon of the implanted virus and write “WANT YOUR MACHINE BACK?”, a message please enter the specified URL, which is nothing more than a blackmail for money:
The coffee machine will also randomly trigger various functions, such as pouring hot water, starting grinding beans, and repeatedly making popping noises. It is completely out of control. The only thing the user can do is to unplug it and make it stop:
Full movie? Therefore, when purchasing smart home equipment in the future, please ensure that there is a safety protection design to avoid this situation:
Source: KOCPC Chinese