Giving gifts to hackers: Don't be security stupid about smart ho - Spokane, North Idaho News & Weather KHQ.com

Giving gifts to hackers: Don't be security stupid about smart home devices

Posted: Updated:

One of the hardest to find holiday gifts this season? Smart home devices; currently the Amazon Echo smart speaker is back-ordered until mid-January.

Just speak the command, and these hub devices will turn on the lights, the TV, find you music, control the temperature. But with more and more of us putting smart home tech on our holiday wish lists, KHQ sought expert help with the one thing you can't tell these devices to do: protect themselves - and you - from hackers.

For all their convenience, smart home devices have so far proved to be pretty stupid, security-wise. In one of the first-ever tests of smart home security,  the University of Michigan hacked into the top selling Samsung SmartThings home organizing hub, using a fake app that allowed researchers to unlock the front door at will.

But such a security breaches are nothing compared to the chaos we saw in October.  The Direct Denial of Service (DDoS) attack that brought the internet to its knees used everyday devices - cameras, universal remotes, even washing machines and refrigerators - that were hooked to the owner's Wi-Fi.

To help solve your smart home security problems, we teamed up with Stephen Heath, Director of Security Services for Spokane-based Intrinium.

“We do security consulting all over the country, break in see if we can steal the stuff,“ Heath explained. “A lot of these new devices are so ‘smart,’ you can send a tweet from your fridge, I don’t know why you would want to do that but people have built this.

Heath says he doesn't have to test your in-house system to guess the most likely vulnerability: passwords that haven’t been changed from their defaults, when they're used at all.

“People sometimes aren't secure with how they set them up so if you know where to look people will have their home security mapped out with no username and password, so they can take a look with what is going on in some back alley in Detroit somewhere,” Heath said. In fact, with a few clicks of a mouse, our data investigator was able to pull up real-time feeds from  unsecured cameras in Spokane, across the country, and around the world.

Fortunately, there's a quick fix you can do right now.

1. Reset the product back to its factory settings.

2. This ought to wipe any malicious code that has found a home in your devices.

3. THEN change your passwords.

Once you've done that, Heath says keeping your smart home on the safer side of the internet boils down to staying off the bad guys' radar - and there, the solution is also surprisingly simple:

“Turning things off when you’re not using them - if you don’t need to send tweets from your fridge, turn it off: with a webcam, baby monitor, when you’re not using it turn it off.”

Just remember - even the smallest bit of information - like a smart thermometer that shows when the furnace is turned off  - can tell a compu-crook the house may be empty. “Don’t let people spy and find out you’re not home,” Heath said. “And if they do get in, give them less information to be able to deal with.”

Despite the risks, the buying frenzy has really just begun. The typical family is predicted to add up to 500 smart home devices -  from dishwashers to deadbolt locks - by the year 2022. 

  • Most Popular StoriesMost Popular StoriesMore>>

  • Family tries euthanizing cat after he walked 12 miles to return home

    Family tries euthanizing cat after he walked 12 miles to return home

    Thursday, April 19 2018 1:23 AM EDT2018-04-19 05:23:12 GMT
    @a.cat.named.toby@a.cat.named.toby
    @a.cat.named.toby@a.cat.named.toby

    RALEIGH, North Carolina - A North Carolina family gave their cat away and then tried to euthanize him after he walked 12 miles back to his home. According to the Society for the Prevention of Cruelty to Animals of Wake County, North Carolina, Toby the cat made the long trek back to his family after they tried to give him away. When he returned, they took him to a shelter to put him down. The shelter called the SPCA to ask if they would help 

    >>

    RALEIGH, North Carolina - A North Carolina family gave their cat away and then tried to euthanize him after he walked 12 miles back to his home. According to the Society for the Prevention of Cruelty to Animals of Wake County, North Carolina, Toby the cat made the long trek back to his family after they tried to give him away. When he returned, they took him to a shelter to put him down. The shelter called the SPCA to ask if they would help 

    >>
  • Toddler shoots pregnant mom outside Indiana thrift store

    Toddler shoots pregnant mom outside Indiana thrift store

    Wednesday, April 18 2018 4:40 PM EDT2018-04-18 20:40:25 GMT

    MERRILVILLE, Indiana - An Indiana woman is in critical but stable condition after her 3-year-old daughter accidentally shot her with a gun her father left in the car. Police in Merrillville say two small children were waiting in the car with their mother while their father shopped inside a thrift store when the shooting happened Tuesday afternoon.

    >>

    MERRILVILLE, Indiana - An Indiana woman is in critical but stable condition after her 3-year-old daughter accidentally shot her with a gun her father left in the car. Police in Merrillville say two small children were waiting in the car with their mother while their father shopped inside a thrift store when the shooting happened Tuesday afternoon.

    >>
  • Community comes together at candlelight vigil for Medical Lake students

    Community comes together at candlelight vigil for Medical Lake students

    Thursday, April 19 2018 2:14 AM EDT2018-04-19 06:14:13 GMT

    MEDICAL LAKE, Wash. - It was an incredibly emotional night in Medical Lake as a candlelight vigil was held in this community that continues to heal. The Medical Lake family gathered tonight to be with each other and be there for each other.  On Saturday, 17-year-old Journey Tueller was killed, and three other students, Laci Sica, Savannah Sutton and Hailey Gross were injured in a crash as they were on their way to catch a team bus. 

    >>

    MEDICAL LAKE, Wash. - It was an incredibly emotional night in Medical Lake as a candlelight vigil was held in this community that continues to heal. The Medical Lake family gathered tonight to be with each other and be there for each other.  On Saturday, 17-year-old Journey Tueller was killed, and three other students, Laci Sica, Savannah Sutton and Hailey Gross were injured in a crash as they were on their way to catch a team bus. 

    >>
HD DOPPLER 6i
/
  • Top Stories from KHQHomeMore>>

  • Louisiana homeowner finds naked intruder in her tub, eating Cheetos

    Louisiana homeowner finds naked intruder in her tub, eating Cheetos

    Thursday, April 19 2018 9:29 AM EDT2018-04-19 13:29:24 GMT
    PHOTO: Ouachita County Sheriff's OfficePHOTO: Ouachita County Sheriff's Office

    MONROE, La. - Police in Louisiana say a woman came home to discover a naked stranger in her tub, eating her Cheetos while taking a bath. A Monroe police affidavit says 29-year-old Evelyn Washington was arrested on burglary and property damage charges. The Fort Worth Star-Telegram reports that a responding officer found "a full tub of water and a plate of food along with half eaten Cheetos belonging to the victim on the toilet next to the tub."   

    >>

    MONROE, La. - Police in Louisiana say a woman came home to discover a naked stranger in her tub, eating her Cheetos while taking a bath. A Monroe police affidavit says 29-year-old Evelyn Washington was arrested on burglary and property damage charges. The Fort Worth Star-Telegram reports that a responding officer found "a full tub of water and a plate of food along with half eaten Cheetos belonging to the victim on the toilet next to the tub."   

    >>
  • Pompeo, Kim discussed held Americans

    Pompeo, Kim discussed held Americans

    Thursday, April 19 2018 9:05 AM EDT2018-04-19 13:05:29 GMT

    WASHINGTON (AP) - CIA Director Mike Pompeo raised the plight of three U.S. citizens held in North Korea during his meeting earlier this month with Kim Jong Un. That's according to a senior White House official who was not authorized to publicly discuss the sensitive discussions and spoke to The Associated Press on condition of anonymity.  

    >>

    WASHINGTON (AP) - CIA Director Mike Pompeo raised the plight of three U.S. citizens held in North Korea during his meeting earlier this month with Kim Jong Un. That's according to a senior White House official who was not authorized to publicly discuss the sensitive discussions and spoke to The Associated Press on condition of anonymity.  

    >>
  • It's (another) boy! Michigan family with 13 sons gets No. 14

    It's (another) boy! Michigan family with 13 sons gets No. 14

    Thursday, April 19 2018 9:00 AM EDT2018-04-19 13:00:44 GMT

    ROCKFORD, Mich. - A Michigan couple with 13 sons has welcomed a 14th into the family. The Grand Rapids Press reports Jay and Kateri Schwandt's latest addition was born Wednesday evening, five days before the baby's expected due date. WOOD-TV reports the boy weighs 8 pounds, 4 ounces and is 21 inches long.  

    >>

    ROCKFORD, Mich. - A Michigan couple with 13 sons has welcomed a 14th into the family. The Grand Rapids Press reports Jay and Kateri Schwandt's latest addition was born Wednesday evening, five days before the baby's expected due date. WOOD-TV reports the boy weighs 8 pounds, 4 ounces and is 21 inches long.  

    >>