Updated Securing your IoT from hacking (org)

stefanbode 2018-07-05 20:12:39 +02:00
parent fcdea639b9
commit a491de47f6
1 changed files with 2 additions and 0 deletions

@ -14,6 +14,8 @@ If someone is able to get your WLAN key, he can login into your network, if he i
(2)
If you can hack a SONOFF you might get access to the keys stored in the device. For example, the MQTT password allows you to read ALL of your devices and change any device at any time. With the information of the MQTT-Server user/password, it might be not required anymore to physically be in your WLAN. Maybe your MQTT Server is publicly accessible. Then the attacker can control your home from any place.
Update: 6.0.0: With this version passwords are not anymore exposed through the serial connection or through the webinterface in configuration mode. Therefore it is now not that simple to get the MQTT or WLAN password from a device. But maybe not impossible
(3)
It might happen, that e.g. your Samsung SmartTV is not as secure as it should be and an attacker gets access to your network. Now he can listen to any traffic and maybe can make changes on all of your IoT devices.