Giving gifts to hackers: Don't be security stupid about smart ho - Spokane, North Idaho News & Weather KHQ.com

Giving gifts to hackers: Don't be security stupid about smart home devices

Posted: Updated:

One of the hardest to find holiday gifts this season? Smart home devices; currently the Amazon Echo smart speaker is back-ordered until mid-January.

Just speak the command, and these hub devices will turn on the lights, the TV, find you music, control the temperature. But with more and more of us putting smart home tech on our holiday wish lists, KHQ sought expert help with the one thing you can't tell these devices to do: protect themselves - and you - from hackers.

For all their convenience, smart home devices have so far proved to be pretty stupid, security-wise. In one of the first-ever tests of smart home security,  the University of Michigan hacked into the top selling Samsung SmartThings home organizing hub, using a fake app that allowed researchers to unlock the front door at will.

But such a security breaches are nothing compared to the chaos we saw in October.  The Direct Denial of Service (DDoS) attack that brought the internet to its knees used everyday devices - cameras, universal remotes, even washing machines and refrigerators - that were hooked to the owner's Wi-Fi.

To help solve your smart home security problems, we teamed up with Stephen Heath, Director of Security Services for Spokane-based Intrinium.

“We do security consulting all over the country, break in see if we can steal the stuff,“ Heath explained. “A lot of these new devices are so ‘smart,’ you can send a tweet from your fridge, I don’t know why you would want to do that but people have built this.

Heath says he doesn't have to test your in-house system to guess the most likely vulnerability: passwords that haven’t been changed from their defaults, when they're used at all.

“People sometimes aren't secure with how they set them up so if you know where to look people will have their home security mapped out with no username and password, so they can take a look with what is going on in some back alley in Detroit somewhere,” Heath said. In fact, with a few clicks of a mouse, our data investigator was able to pull up real-time feeds from  unsecured cameras in Spokane, across the country, and around the world.

Fortunately, there's a quick fix you can do right now.

1. Reset the product back to its factory settings.

2. This ought to wipe any malicious code that has found a home in your devices.

3. THEN change your passwords.

Once you've done that, Heath says keeping your smart home on the safer side of the internet boils down to staying off the bad guys' radar - and there, the solution is also surprisingly simple:

“Turning things off when you’re not using them - if you don’t need to send tweets from your fridge, turn it off: with a webcam, baby monitor, when you’re not using it turn it off.”

Just remember - even the smallest bit of information - like a smart thermometer that shows when the furnace is turned off  - can tell a compu-crook the house may be empty. “Don’t let people spy and find out you’re not home,” Heath said. “And if they do get in, give them less information to be able to deal with.”

Despite the risks, the buying frenzy has really just begun. The typical family is predicted to add up to 500 smart home devices -  from dishwashers to deadbolt locks - by the year 2022. 

  • Most Popular StoriesMost Popular StoriesMore>>

  • Police confirm body of missing Spokane man Ian Powers found in bay; Death ruled accidental

    Police confirm body of missing Spokane man Ian Powers found in bay; Death ruled accidental

    Tuesday, November 20 2018 11:35 AM EST2018-11-20 16:35:21 GMT

    SAN FRANCISCO - The Santa Clara Police Department has confirmed the body of 32-year-old Ian Powers from Spokane was found in the water near Alviso Marina on Saturday. According to the department, the Coroner's Office has determined that the cause of death was salt water drowning. The manner of death has been ruled an accident. 

    >>

    SAN FRANCISCO - The Santa Clara Police Department has confirmed the body of 32-year-old Ian Powers from Spokane was found in the water near Alviso Marina on Saturday. According to the department, the Coroner's Office has determined that the cause of death was salt water drowning. The manner of death has been ruled an accident. 

    >>
  • Citing E. coli outbreak, US officials say don't eat romaine

    Citing E. coli outbreak, US officials say don't eat romaine

    Tuesday, November 20 2018 3:34 PM EST2018-11-20 20:34:25 GMT

    NEW YORK - U.S. health officials are telling people to avoid eating romaine lettuce because of an E. coli outbreak that has sickened 32 people in 11 states. The Food and Drug Administration says it's working with officials in Canada, where people are also being warned to stay away from romaine lettuce.

    >>

    NEW YORK - U.S. health officials are telling people to avoid eating romaine lettuce because of an E. coli outbreak that has sickened 32 people in 11 states. The Food and Drug Administration says it's working with officials in Canada, where people are also being warned to stay away from romaine lettuce.

    >>
  • How you can help the family of 8-year-old boy randomly stabbed at Spokane Valley gas station

    How you can help the family of 8-year-old boy randomly stabbed at Spokane Valley gas station

    Monday, November 19 2018 9:46 PM EST2018-11-20 02:46:19 GMT

    Several locals are trying to help the family of an eight-year-old boy, who was randomly stabbed at a gas station Saturday. Rayel Von Quade said she and three others (Salem Rose Sovereign, Quincey Brooks and Dani Loup) have been in touch with the Bush family. (KHQ has reached out to the family and have not heard back.) "They're, of course, very overwhelmed and stressed out right now and she's been dealing with a lot of messages from a lot of people coming through. But she says t...

    >>

    Several locals are trying to help the family of an eight-year-old boy, who was randomly stabbed at a gas station Saturday. Rayel Von Quade said she and three others (Salem Rose Sovereign, Quincey Brooks and Dani Loup) have been in touch with the Bush family. (KHQ has reached out to the family and have not heard back.) "They're, of course, very overwhelmed and stressed out right now and she's been dealing with a lot of messages from a lot of people coming through. But she says t...

    >>
HD DOPPLER 6i
/
  • Top Stories from KHQHomeMore>>

  • CdA School District Proposing Levy Increase To Fund Additional Mental Health Counselors, School Security, Teacher Pay

    CdA School District Proposing Levy Increase To Fund Additional Mental Health Counselors, School Security, Teacher Pay

    Tuesday, November 20 2018 8:35 PM EST2018-11-21 01:35:58 GMT

    The Coeur d’Alene School District wants your input on a proposed levy. The levy funds school operations and maintenance and is currently totaled at $16 million, but the district is proposing an additional $4 million to help fund several areas of importance. 

    >>

    The Coeur d’Alene School District wants your input on a proposed levy. The levy funds school operations and maintenance and is currently totaled at $16 million, but the district is proposing an additional $4 million to help fund several areas of importance. 

    >>
  • Fairchild Airman invents mechanism for KC-135 to keep its landing gear doors from breaking

    Fairchild Airman invents mechanism for KC-135 to keep its landing gear doors from breaking

    Tuesday, November 20 2018 8:11 PM EST2018-11-21 01:11:12 GMT

    SPOKANE, Wash. - If there is anyone who knows their way around a KC-135 Stratotanker, it's Tech. Sgt. Shawn Roberge. Roberge is an Aircraft Structural Maintenance Section Chief; in other words, he fixes things. And since Roberge is constantly working on planes that were built in the 1950's, it's fair to say he stays busy. "The Air Force depends more and more on the 135's before the new tanker comes online," said Roberge. 

    >>

    SPOKANE, Wash. - If there is anyone who knows their way around a KC-135 Stratotanker, it's Tech. Sgt. Shawn Roberge. Roberge is an Aircraft Structural Maintenance Section Chief; in other words, he fixes things. And since Roberge is constantly working on planes that were built in the 1950's, it's fair to say he stays busy. "The Air Force depends more and more on the 135's before the new tanker comes online," said Roberge. 

    >>
  • Investigators determine Tuesday house fire caused by combustibles kept too close to wood stove

    Investigators determine Tuesday house fire caused by combustibles kept too close to wood stove

    Tuesday, November 20 2018 7:42 PM EST2018-11-21 00:42:26 GMT

    Spokane fire investigators determine Tuesday house fire was caused by keeping combustibles too close to a wood stove. Firefighters responded to the house fire in the 9600 block of N Seminole Drive on Tuesday morning.

    >>

    Spokane fire investigators determine Tuesday house fire was caused by keeping combustibles too close to a wood stove. Firefighters responded to the house fire in the 9600 block of N Seminole Drive on Tuesday morning.

    >>