AMAZON KEY FLAW COULD LET ROGUE DELIVERYMEN DISABLE YOUR CAMERA


When Amazon Launched its Amazon Key service last month, it also offered a remedy for anyone—realistically, most people—who might be creeped out that the service gives random strangers unfettered access to your home. That security antidote? An internet-enabled camera called Cloud Cam, designed to sit opposite your door and reassuringly record every Amazon Key delivery.
But now security researchers have demonstrated that with a simple program run from any computer in Wi-Fi range, that camera can be not only disabled but frozen. A viewer watching its live or recorded stream sees only a closed door, even as their actual door is opened and someone slips inside. That attack would potentially enable rogue delivery people to stealthily steal from Amazon customers, or otherwise invade their inner sanctum.
And while the threat of a camera-hacking courier seems an unlikely way for your house to be burgled, the researchers argue it potentially strips away a key safeguard in Amazon's security system. 
"The camera is very much something Amazon is relying on in pitching the security of this as a safe solution," says Ben Caudill, the founder of the Seattle-based security firm Rhino Security Labs, whose researchers discovered and demonstrated the Amazon Key attack. "Disabling that camera on command is a pretty powerful capability when you’re talking about environments where you’re relying heavily on that being a critical safety mechanism."

Comments

Popular posts from this blog

MEET THE GEEK WHO TRACKS ROGUE SATELLITES WITH COAT HANGERS

THIS RADIO HACKER COULD HIJACK CITYWIDE EMERGENCY SIRENS TO PLAY ANY SOUND

Technology Wikipedia