20
FCC Launches 'Cyber Trust Mark' for IoT Devices to Certify Security Compliance
(thehackernews.com)
Guaranteed to have a backdoor installed?
this post was submitted on 09 Jan 2025
20 points (100.0% liked)
Cybersecurity
6111 readers
27 users here now
c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.
THE RULES
Instance Rules
- Be respectful. Everyone should feel welcome here.
- No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
- No Ads / Spamming.
- No pornography.
Community Rules
- Idk, keep it semi-professional?
- Nothing illegal. We're all ethical here.
- Rules will be added/redefined as necessary.
If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.
Learn about hacking
Other security-related communities [email protected] [email protected] [email protected] [email protected] [email protected]
Notable mention to [email protected]
founded 2 years ago
MODERATORS
Same security as a TSA approved lock?
Meanwhile, the vendors are introducing security vulnerabilities marketed as features, even in protocols that would be reasonably secure otherwise...
Such as?
Well apple just got in trouble for eavesdropping on it's users, so..
I doubt Siri eavesdropping was a bug.
Zigbee devices that can be remotely reset back into pairing mode.
Oh man I was just about to zigbee everything in my house. Have you got more information about this?
It's a vendor specific thing, so if that bothers you, just look up the pairing procedure for each device before buying.
As far as I remember, the philips bulbs can be reset by holding on and off buttons on the remote. This functinality has a limited range, but a sophisticated attacker could probably just bring a better antenna.
In practice, the compatibility issues will probably keep you busy enough not to think about the theoretical attacks.
Sorry, I didn't mean to discourage you. Practically all the lights in my house, and some other stuff like blinds and aquarium equipment, are running on zigbee. When you finally tune it just right, it's pretty great.
"Goddamnit, Cyber Trust Mark! None of these devices are remotely secure enough! I knew we should have sprung for the more expensive Cyber Trust Kelly, but everyone was like, 'nO, tHiS mOdEL iS BaSiCaLly tHe SaMe...SaVe A fEw DoLlArS...'"