16 stories tagged iot-security, newest first.
217 points by emot | 187 comments
IPinfo blog post analyzing internet-exposed supermarket fridge control dashboards, most in France, that were left vulnerable online for months.
142 points by cataflam | 87 comments
BBC News article reporting that refrigeration systems in French supermarkets were disrupted by a cyber attack.
43 points by salaryman777 | 4 comments
Reuters article about a cyberattack on French supermarket chain Intermarché in which hackers heated store fridges, causing fires and food losses.
517 points by driverdan | 236 comments
WIRED article reporting that a hacker collective breached a Flock surveillance camera and leaked data showing it captured 1.6 million images of 50,000 vehicles in 21 days.
380 points by jcurbo | 212 comments
A Substack post arguing that widespread refrigeration failures at U.S. military DeCA commissaries may have been caused by hacking of the freezer systems.
630 points by hhh | 211 comments
A blog post describing how firmware analysis of a Hanwha security camera revealed a GitHub admin token embedded in its login page.
377 points by Brajeshwar | 203 comments
Popular Science article about a man who accidentally gained control of about 7,000 DJI Romo robot vacuums while trying to steer his own with a gaming controller.
577 points by minimalthinker | 238 comments
Blog post describing how reverse-engineering a Kickstarter smart sleep mask revealed it broadcasts users' EEG brainwave data to an open MQTT broker and accepts stimulation commands.
323 points by sibellavia | 104 comments
Blog post by Simone Margaritelli detailing reverse engineering of the TP-Link Tapo C200 camera, finding hardcoded keys, buffer overflows and privacy issues with AI assistance.
522 points by kennedn | 162 comments
A blog post about reverse-engineering a TP-Link Tapo camera bought to monitor a dog, and what the author discovered about TP-Link's systems.
554 points by ajdude | 223 comments
Blog post detailing how the author exploited IKKO Activebuds AI earbuds, ran DOOM on them, and extracted their OpenAI API key and customer data.
459 points by ChrisArchitect | 253 comments
Blog post by Eric Daigle describing how default credentials on MESH by Viscount apartment access control panels let him access dozens of buildings from his phone.
855 points by riverdroid | 345 comments
Truffle Security blog post describing a backdoor found in the Eight Sleep smart bed that allowed remote access, and how the authors removed it.
423 points by ahubert | 220 comments
Bert Hubert blog post arguing that cloud-controlled solar inverters form huge unregulated virtual power plants, following a Dutch hacker gaining control of 4 million installations.
3270 points by SimingtonFCC | 864 comments
Ask HN post by FCC Commissioner Nathan Simington inviting public comments on a proposed IoT cybersecurity labeling rule, including disclosure of security update support periods.
399 points by voxadam | 160 comments
A blog post by Daniel B, dated March 15, 2023, titled "Alexa, what is my wifi password?", apparently about retrieving Wi-Fi credentials stored on Amazon Alexa devices.