Comment on Thousands of private camera footages from bedrooms hacked, sold online - VnExpress International
dangblingus@lemmy.dbzer0.com 9 months ago
Yet another reason why IoT crap sucks. You don’t need to put everything on the internet. This one should be obvious.
People don't think about that. You have to register somewhere in order to use your $12.99 cam, install some app and are good to go.
How would a someone not interested in tech know that the footage data is stored on some online server and you are at the mercy of their itsec.
Which is why these companies that are marketing wifi and cloud-polling devices should be held responsible for the data breaches and regulated more rigorously.
It should be cost-prohibitive to design a smart device that sends data to a centralized server, but they do it because the upside value of having the data is so attractive. They shouldn’t be allowed to hide behind a ToS agreement with mandatory arbitration when their security is inevitably breached.
Take it up with your congressman.
Seriously. It sounds like you have an informed and well-reasoned opinion. They’re not 100% corrupt. And they usually only hear about tech from industry lobbyists.
Let them hear from an intelligent constituent for a change.
Good luck holding a company sitting in China “responsible” for about anything.
The question isn’t “how would someone know…?” the question is “do you know what a hacker does?”.
Home assistant tries to keep shit local.
depends on the device. If the device dont provide local connection, there is nothing home assistant can do about it. Some device will also send data to the cloud even it can be locally controlled.
Oh for sure. But unlike smart things or any other hub, only the data that needs a cloud connection will go through the cloud…
Home assistant is great at what it does, but the problem is too big for HA to really fix it by itself.
It’s the end-devices that are the biggest culprits, paired with the apps installed on your phone. It’s the reason Google was basically giving away their home-mini’s the last couple years.
If you use a smart device that comes with - or requires - an app, there’s it’s almost guaranteed that app collects a certain amount of data from you to be sold or utilized for user profiling.
The problem is that everyone has half a dozen of those devices already, and swapping them all out takes time, effort, and money that most people simply don’t have.
It’s a challenge even for the truly dedicated and privacy-minded individual to know which devices are locally hosted and which ones use local internet access or a permissive phone apps to function. Even if you DO manage to keep a clean slate, there are always companies that change their policies once they have high-adoption and force cloud integration on their users. See Phillips, Chamberlain, Microsoft, Google, Amazon…
I love Home Assistant, but it’s a nightmare trying to cut out all the unsecured bullshit I’ve found myself with even in the past two years.
Thanks to laziness of the device manufacturers, a lot of them either expose some data endpoints locally, or just use Zigbee which can be easily paired to be used local-only.
Those that require Wi-Fi access can be filtered on the router to disable internet access.
With end to end encryption, requiring manual key transfer, this would not be an issue.
friend_of_satan@lemmy.world 9 months ago
The “s” in IOT is for “security”.