Wednesday, September 9, 2015

We are professional IoT hackers and researchers at Rapid7 (not Rapid9) and just published a paper on baby monitor security. GO! IAmA

Who we are

We're Mark Stanislav (/u/mstanisl) & Tod Beardsley (/u/todbatx), security researchers (or colloquially, hackers) at Rapid7. We're here to talk about the security of Internet of Things devices, as well as the IoT baby monitor security research we released last week.

What's the IoT (Internet of Things) and why do we care about IoT security?

Almost daily we see a new "smart," Internet-connected device on the market, created in the hopes of making simple tasks more convenient and our lives easier -- from smart thermostats and refrigerators, to medical devices like insulin pumps. These Internet-connected things are collectively known as the IoT.

Most of these IoT devices are extremely easy for criminals to break in to and manipulate for their own gain. Why would someone want to do this? Stealing data, compromising a home network, or causing mayhem and distress are common motives.

The IoT represents an increasing risk to the general public, so that's why we hack IoT devices. We hope to find security flaws before the bad guys do, inform the vendor, and inform the public, all in the hope of baking better security into these devices before they hit the Internet.

Baby monitors...?

Last week, we released a paper on the security of Internet-connected baby monitors and disclosed ten newly discovered vulnerabilities found in popular brands on the market, kicking off a bigger conversation about the safety of the Internet of Things, what consumers can do to be aware of the risks, and what manufacturers can do to make their devices safer. You can read our research here: http://ift.tt/1Lkc17S

Proof

Here are the tweets and Keybase identities, and a link to our AMA annoucement.

Tod: Twitter || Keybase

Mark: Twitter || Keybase

We are not affiliated with Rapid9, as that is a fictional company.



Submitted September 10, 2015 at 12:24AM by todbatx http://ift.tt/1L2iR6f IAmA

No comments:

Post a Comment