
TL;DR
A WIRED reporter was tracked and spied on using a child's smartwatch, revealing significant security vulnerabilities in the device. The incident highlights the risks associated with low-cost GPS-enabled wearables, which can be exploited for digital stalking.
✦ Why It Matters
Evaluate the security of IoT devices before purchasing or deploying them in your projects.
Key Takeaways
Full Summary
A WIRED reporter tested a low-cost child's smartwatch, only to discover that it was easily hacked by a security researcher. The watch, designed for parental tracking, transmitted Wi-Fi identifiers that allowed the researcher to pinpoint the reporter's location and even access the device's camera and microphone without detection.
Researchers Vangelis Stykas and Felipe Solferini analyzed over 70 GPS-enabled devices and found that many used insecure platforms from Shenzhen-based manufacturers, exposing them to various forms of hacking. They identified significant vulnerabilities, including a lack of authentication, which could allow unauthorized access to devices.
Their findings highlight a troubling trend where millions of devices from different brands share the same insecure backend, making it difficult for consumers to identify safe options. Despite warnings to manufacturers, many vulnerabilities remain unaddressed, putting users at risk.
Related