{"id":2852,"date":"2015-11-23T11:32:20","date_gmt":"2015-11-23T19:32:20","guid":{"rendered":"http:\/\/codecurmudgeon.com\/wp\/?page_id=2852"},"modified":"2020-08-14T16:54:36","modified_gmt":"2020-08-14T23:54:36","slug":"iot-hall-shame","status":"publish","type":"page","link":"https:\/\/codecurmudgeon.com\/wp\/iot-hall-shame\/","title":{"rendered":"IoT Hall-of-Shame"},"content":{"rendered":"<div id=\"attachment_3291\" style=\"width: 160px\" class=\"wp-caption alignleft\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-3291\" class=\"size-thumbnail wp-image-3291\" src=\"http:\/\/codecurmudgeon.com\/wp\/wp-content\/uploads\/2015\/01\/IoT-hacks-150x150.jpg\" alt=\"A collage of various devices that not only can be hacked, but already have been.\" width=\"150\" height=\"150\" srcset=\"https:\/\/codecurmudgeon.com\/wp\/wp-content\/uploads\/2015\/01\/IoT-hacks-150x150.jpg 150w, https:\/\/codecurmudgeon.com\/wp\/wp-content\/uploads\/2015\/01\/IoT-hacks-144x144.jpg 144w\" sizes=\"auto, (max-width: 150px) 100vw, 150px\" \/><p id=\"caption-attachment-3291\" class=\"wp-caption-text\">Devices that have been hacked<\/p><\/div>\n<p><strong>Welcome to the <span class=\"explanatory-dictionary-highlight\" data-definition=\"explanatory-dictionary-definition-10021\">IoT<\/span> Hall-of-Shame<\/strong><br \/>\nWith the rise of internet enabled devices in the <em><span class=\"explanatory-dictionary-highlight\" data-definition=\"explanatory-dictionary-definition-21\">Internet of Things<\/span><\/em> or <em><span class=\"explanatory-dictionary-highlight\" data-definition=\"explanatory-dictionary-definition-10021\">IoT<\/span><\/em> the need for software security is becoming even more important. Unfortunately many device makers seem to put security on the back burner or not even understand the basics of cybersecurity. Some call it the <em>Internet of Evil Things<\/em>.<\/p>\n<p>I am maintaining here a list of known hacks for <em>&#8220;things&#8221;<\/em> (<span class=\"explanatory-dictionary-highlight\" data-definition=\"explanatory-dictionary-definition-10021\">Iot<\/span>, IIoT, SCADA, ICS) based on the date that the hack was published. <a href=\"https:\/\/www.parasoft.com\/industries\/embedded\/?utm_campaign=Misc_Q1_2018&amp;utm_source=CodeCurmudgeon&amp;utm_medium=DisplayAd&amp;utm_term=IoT&amp;utm_content=Footer\" target=\"parasoft\" rel=\"noopener noreferrer\"><img loading=\"lazy\" decoding=\"async\" class=\"alignright size-medium wp-image-5535\" src=\"https:\/\/codecurmudgeon.com\/wp\/wp-content\/uploads\/2020\/08\/Parasoft-Automated-Testing-Tools-banner-03.png\" alt=\"\" width=\"300\" height=\"94\" \/><\/a>Please assist &#8211; if you&#8217;re aware of additional &#8220;thing&#8221;-hacks please let me know in the comments at the bottom of the page or on <a href=\"https:\/\/twitter.com\/codecurmudgeon\" target=\"twitter\" rel=\"noopener noreferrer\">Twitter<\/a>.<\/p>\n<p><!-- TODO \n\n\n\n<tr>\n\n<td><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/codecurmudgeon.com\/wp\/wp-content\/uploads\/2016\/02\/auto-tesla-model-s-dreamstime_s_45227368-150x150.jpg\" alt=\"\" width=\"150\" height=\"150\" class=\"aligncenter size-thumbnail wp-image-3675\" srcset=\"https:\/\/codecurmudgeon.com\/wp\/wp-content\/uploads\/2016\/02\/auto-tesla-model-s-dreamstime_s_45227368-150x150.jpg 150w, https:\/\/codecurmudgeon.com\/wp\/wp-content\/uploads\/2016\/02\/auto-tesla-model-s-dreamstime_s_45227368-144x144.jpg 144w\" sizes=\"auto, (max-width: 150px) 100vw, 150px\" \/><\/td>\n\n\n\n<td><a href=\"https:\/\/www.securityweek.com\/tesla-awards-researcher-10000-after-finding-xss-vulnerability\" target=\"iot\" rel=\"noopener noreferrer\">Tesla car<\/a><\/td>\n\n\n\n<td>2019-07<\/td>\n\n<\/tr>\n\n\n\n\n\n<tr>\n\n<td><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/codecurmudgeon.com\/wp\/wp-content\/uploads\/2019\/07\/Apple-watch-series-4-150x150.jpeg\" alt=\"black square apple smartwatch with black band and clockface lit up\" width=\"150\" height=\"150\" class=\"aligncenter size-thumbnail wp-image-6025\" \/><\/td>\n\n\n\n<td><a href=\"https:\/\/9to5mac.com\/2019\/07\/11\/apple-disables-walkie-talkie\/\" target=\"iot\" rel=\"noopener noreferrer\">Apple watch walkie-talkie<\/a><\/td>\n\n\n\n<td>2019-07<\/td>\n\n<\/tr>\n\n\n\n\n\n<tr>\n\n<td><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/codecurmudgeon.com\/wp\/wp-content\/uploads\/2019\/07\/USB-dongle-AdobeStock_161894341-sml-150x150.jpeg\" alt=\"Mini Usb Wifi dongle isolated on white\" width=\"150\" height=\"150\" class=\"aligncenter size-thumbnail wp-image-6023\" srcset=\"https:\/\/codecurmudgeon.com\/wp\/wp-content\/uploads\/2019\/07\/USB-dongle-AdobeStock_161894341-sml-150x150.jpeg 150w, https:\/\/codecurmudgeon.com\/wp\/wp-content\/uploads\/2019\/07\/USB-dongle-AdobeStock_161894341-sml-144x144.jpeg 144w\" sizes=\"auto, (max-width: 150px) 100vw, 150px\" \/><\/td>\n\n\n\n<td><a href=\"https:\/\/www.zdnet.com\/article\/logitech-wireless-usb-dongles-vulnerable-to-new-hijacking-flaws\/\" target=\"iot\" rel=\"noopener noreferrer\">Logitech wireless USB dongle<\/a><\/td>\n\n\n\n<td>2019-07<\/td>\n\n<\/tr>\n\n\n\n\n\n<tr>\n\n<td><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/codecurmudgeon.com\/wp\/wp-content\/uploads\/2016\/12\/Lenovo-NAS-Drive-Storage-150x150.jpg\" alt=\"\" width=\"150\" height=\"150\" class=\"aligncenter size-thumbnail wp-image-4690\" srcset=\"https:\/\/codecurmudgeon.com\/wp\/wp-content\/uploads\/2016\/12\/Lenovo-NAS-Drive-Storage-150x150.jpg 150w, https:\/\/codecurmudgeon.com\/wp\/wp-content\/uploads\/2016\/12\/Lenovo-NAS-Drive-Storage-300x300.jpg 300w, https:\/\/codecurmudgeon.com\/wp\/wp-content\/uploads\/2016\/12\/Lenovo-NAS-Drive-Storage-144x144.jpg 144w, https:\/\/codecurmudgeon.com\/wp\/wp-content\/uploads\/2016\/12\/Lenovo-NAS-Drive-Storage.jpg 500w\" sizes=\"auto, (max-width: 150px) 100vw, 150px\" \/><\/td>\n\n\n\n<td><a href=\"https:\/\/www.forbes.com\/sites\/daveywinder\/2019\/07\/17\/lenovo-confirms-36tb-data-leak-security-vulnerability\/#5ebcf4b62b96\" target=\"iot\" rel=\"noopener noreferrer\">Lenovo NAS storage<\/a><\/td>\n\n\n\n<td>2019-07<\/td>\n\n<\/tr>\n\n\n\n\n\n<tr>\n\n<td><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/codecurmudgeon.com\/wp\/wp-content\/uploads\/2019\/07\/ship-wheelhouse-AdobeStock_82789433-sml-150x150.jpeg\" alt=\"view of control wheel and control system displays and window from a ship inside the wheelhouse\" width=\"150\" height=\"150\" class=\"aligncenter size-thumbnail wp-image-6017\" \/><\/td>\n\n\n\n<td><a href=\"https:\/\/www.cybersecurity-insiders.com\/cyber-attack-on-ship-disrupts-the-functionality-of-onboard-control-systems\/\" target=\"iot\" rel=\"noopener noreferrer\">Ships<\/a><\/td>\n\n\n\n<td>2019-07<\/td>\n\n<\/tr>\n\n\n\n\n--><\/p>\n<div id=\"footable_parent_6052\"\n         class=\" footable_parent ninja_table_wrapper loading_ninja_table wp_table_data_press_parent bootstrap4 \">\n                <table data-ninja_table_instance=\"ninja_table_instance_0\" data-footable_id=\"6052\" data-filter-delay=\"1000\"            id=\"footable_6052\"\n           data-unique_identifier=\"ninja_table_unique_id_1875046803_6052\"\n           class=\" foo-table ninja_footable foo_table_6052 ninja_table_unique_id_1875046803_6052 table  nt_type_ajax_table vertical_centered  footable-paging-right ninja_table_pro\">\n                    <caption>Hacked devices<\/caption>\n                <colgroup>\n                            <col class=\"ninja_column_0 \">\n                            <col class=\"ninja_column_1 \">\n                            <col class=\"ninja_column_2 \">\n                    <\/colgroup>\n            <\/table>\n    \n    \n    \n<\/div>\n\n<p>For more security info check out the <a href=\"\/wp\/security-resources\/\">security resources page<\/a> and a few of these books <span class=\"explanatory-dictionary-highlight\" data-definition=\"explanatory-dictionary-definition-10014\">can<\/span> help.<br \/>\n<a href=\"http:\/\/www.amazon.com\/gp\/product\/0123868866\/ref=as_li_tl?ie=UTF8&amp;camp=1789&amp;creative=9325&amp;creativeASIN=0123868866&amp;linkCode=as2&amp;tag=codecurmu-20&amp;linkId=5FGFD76WPFYUSVW7\" rel=\"nofollow\">Embedded Systems Security: Practical Methods for Safe and Secure Software and Systems Development<\/a><img loading=\"lazy\" decoding=\"async\" style=\"border: none !important; margin: 0px !important;\" src=\"http:\/\/ir-na.amazon-adsystem.com\/e\/ir?t=codecurmu-20&amp;l=as2&amp;o=1&amp;a=0123868866\" alt=\"\" width=\"1\" height=\"1\" border=\"0\" \/>,<\/p>\n<p><a href=\"http:\/\/www.amazon.com\/gp\/product\/B00K6N4JU8\/ref=as_li_tl?ie=UTF8&amp;camp=1789&amp;creative=390957&amp;creativeASIN=B00K6N4JU8&amp;linkCode=as2&amp;tag=codecurmu-20&amp;linkId=T5AJWERE4DLIQXSY\" rel=\"nofollow\">Platform Embedded Security Technology Revealed: Safeguarding the Future of Computing with Intel Embedded Security and Management Engine<\/a><img loading=\"lazy\" decoding=\"async\" style=\"border: none !important; margin: 0px !important;\" src=\"http:\/\/ir-na.amazon-adsystem.com\/e\/ir?t=codecurmu-20&amp;l=as2&amp;o=1&amp;a=B00K6N4JU8\" alt=\"\" width=\"1\" height=\"1\" border=\"0\" \/>,<\/p>\n<p><a href=\"http:\/\/www.amazon.com\/gp\/product\/1466575301\/ref=as_li_tl?ie=UTF8&amp;camp=1789&amp;creative=390957&amp;creativeASIN=1466575301&amp;linkCode=as2&amp;tag=codecurmu-20&amp;linkId=QMLM7HWAPSW5D5K4\" rel=\"nofollow\">Software Test Attacks to Break Mobile and Embedded Devices (Chapman &amp; Hall\/CRC Innovations in Software Engineering and Software Development Series)<\/a><img loading=\"lazy\" decoding=\"async\" style=\"border: none !important; margin: 0px !important;\" src=\"http:\/\/ir-na.amazon-adsystem.com\/e\/ir?t=codecurmu-20&amp;l=as2&amp;o=1&amp;a=1466575301\" alt=\"\" width=\"1\" height=\"1\" border=\"0\" \/><\/p>\n<p><!-- shortlink http:\/\/bit.ly\/iotshame --><\/p>\n<p><!-- \n\n=====================\n== PARTIALLY READY ==\n=====================\n\n2013 chevy volt and other models via onstar\nby Samy   from 2015-08\nhttp:\/\/mashable.com\/2015\/07\/31\/gm-onstar-hack\/\n<iframe loading=\"lazy\"  id=\"_ytid_57122\"  width=\"550\" height=\"309\"  data-origwidth=\"550\" data-origheight=\"309\" src=\"https:\/\/www.youtube.com\/embed\/3olXUbS-prU?enablejsapi=1&autoplay=0&cc_load_policy=0&cc_lang_pref=&iv_load_policy=1&loop=0&rel=1&fs=1&playsinline=0&autohide=2&theme=dark&color=red&controls=1&disablekb=0&\" class=\"__youtube_prefs__  epyt-is-override  no-lazyload\" title=\"YouTube player\"  allow=\"fullscreen; accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen data-no-lazy=\"1\" data-skipgform_ajax_framebjll=\"\"><\/iframe>\n\nChevy impala (and others?) via onstar\nby darpa  from 2015-02\nhttp:\/\/www.autoblog.com\/2015\/02\/09\/<span class=\"explanatory-dictionary-highlight\" data-definition=\"explanatory-dictionary-definition-10014\">can<\/span>-darpa-hack-into-a-chevy-impala-through-onstar\n(links to other attacks in the same article)\n\npen test of <span class=\"explanatory-dictionary-highlight\" data-definition=\"explanatory-dictionary-definition-10021\">iot<\/span> ics industrial control systems\nping sweep itself <span class=\"explanatory-dictionary-highlight\" data-definition=\"explanatory-dictionary-definition-10014\">can<\/span> cause crashes\nhttp:\/\/energy.sandia.gov\/wp-content\/gallery\/uploads\/sand_2005_2846p.pdf\nhttps:\/\/www.blackhat.com\/docs\/eu-14\/materials\/eu-14-Soullie-Industrial-Control-Systems-Pentesting-PLCs-101.pdf\n\nCar auto <span class=\"explanatory-dictionary-highlight\" data-definition=\"explanatory-dictionary-definition-10014\">can<\/span>-bus attacks via opensource software carshark\nhttp:\/\/www.popsci.com\/cars\/article\/2010-05\/researchers-hack-car-computers-shutting-down-brakes-engine-and-more\nhttp:\/\/jalopnik.com\/5539181\/carshark-software-lets-you-hack-into-control-and-kill-any-car\nhttp:\/\/www.pcworld.com\/article\/196293\/car_hackers_can_kill_brakes_engine_and_more.html\nhttps:\/\/github.com\/W1nterSilence\/CarShark\nsits on <span class=\"explanatory-dictionary-highlight\" data-definition=\"explanatory-dictionary-definition-10013\"><span class=\"explanatory-dictionary-highlight\" data-definition=\"explanatory-dictionary-definition-10014\">can<\/span> bus<\/span> and listens\n\nhospital cyber attacks\nhttp:\/\/spectrum.ieee.org\/the-human-os\/biomedical\/devices\/5-major-hospital-hacks-horror-stories-from-the-cyber-security-frontlines\n\n\n<tr>\n\n\n<td>img<\/td>\n\n\n\n\n<td><a href=\"http:\/\/www.autosec.org\/pubs\/cars-usenixsec2011.pdf\" target=\"iot\" rel=\"noopener noreferrer\">Car - various attack surfaces<\/a><\/td>\n\n\n\n\n<td>date<\/td>\n\n\n<\/tr>\n\n\nhttps:\/\/threatpost.com\/honeypots-illustrate-scores-of-vulnerabilities-in-medical-devices\/116280\/\n\nshort link http:\/\/bit.ly\/iotshame\n--><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Welcome to the IoT Hall-of-Shame With the rise of internet enabled devices in the Internet of Things or IoT the need for software security is becoming even more important. Unfortunately many device makers seem to put security on the back burner or not even understand the basics of cybersecurity. Some call it the Internet of [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":3291,"parent":0,"menu_order":2,"comment_status":"closed","ping_status":"closed","template":"","meta":{"nf_dc_page":"","_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"class_list":["post-2852","page","type-page","status-publish","has-post-thumbnail","hentry"],"_links":{"self":[{"href":"https:\/\/codecurmudgeon.com\/wp\/wp-json\/wp\/v2\/pages\/2852","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/codecurmudgeon.com\/wp\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/codecurmudgeon.com\/wp\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/codecurmudgeon.com\/wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/codecurmudgeon.com\/wp\/wp-json\/wp\/v2\/comments?post=2852"}],"version-history":[{"count":911,"href":"https:\/\/codecurmudgeon.com\/wp\/wp-json\/wp\/v2\/pages\/2852\/revisions"}],"predecessor-version":[{"id":6010,"href":"https:\/\/codecurmudgeon.com\/wp\/wp-json\/wp\/v2\/pages\/2852\/revisions\/6010"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/codecurmudgeon.com\/wp\/wp-json\/wp\/v2\/media\/3291"}],"wp:attachment":[{"href":"https:\/\/codecurmudgeon.com\/wp\/wp-json\/wp\/v2\/media?parent=2852"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}