Watches are a security threat

Stefan Mileschin · 27th July 2015, 07:28

The maker of expensive printer ink is warning that smartwatches are a huge security threat.

HP Security found that many of the most popular wearable gizmos carry major security flaws thanks to their increasing connectivity to the Internet of Things.

All the ten gizmos tested by Fortify, HP Security’s application provider, contained “significant vulnerabilities”.

These included a lack of proper authorisation and authentication. When connected to an insecure test mobile device, three in ten of the gizmos were vulnerable to ‘account harvesting.’ This was thanks to a combination of weak password policy, lack of account lockout, and user enumeration.

Seventy percent of the smartwatches tested were also found to come up short on protecting firmware updates, including transmitting firmware updates without encryption and without encrypting the update files.

Three of the gizmos used cloud-based web interfaces that left them at risk of having password or data stolen by hackers using reset password forms.

http://www.techeye.net/business/watc...ecurity-threat

27th July 2015, 07:28	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 153,541	Watches are a security threat The maker of expensive printer ink is warning that smartwatches are a huge security threat. HP Security found that many of the most popular wearable gizmos carry major security flaws thanks to their increasing connectivity to the Internet of Things. All the ten gizmos tested by Fortify, HP Security’s application provider, contained “significant vulnerabilities”. These included a lack of proper authorisation and authentication. When connected to an insecure test mobile device, three in ten of the gizmos were vulnerable to ‘account harvesting.’ This was thanks to a combination of weak password policy, lack of account lockout, and user enumeration. Seventy percent of the smartwatches tested were also found to come up short on protecting firmware updates, including transmitting firmware updates without encryption and without encrypting the update files. Three of the gizmos used cloud-based web interfaces that left them at risk of having password or data stolen by hackers using reset password forms. http://www.techeye.net/business/watc...ecurity-threat

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Connected cars pose security threat	Stefan Mileschin	WebNews	0	1st January 2015 09:26
This is Earth's malware threat, visualized	Stefan Mileschin	WebNews	0	7th April 2014 08:52
Facebook grants $33,500 to security researcher who discovers fatal security flaw	Stefan Mileschin	WebNews	0	27th January 2014 10:16
Microsoft's immediate plans against NSA 'threat'	Stefan Mileschin	WebNews	0	5th December 2013 10:23
McAfee says The Pirate Bay is a security threat	Stefan Mileschin	WebNews	0	11th November 2013 11:49
Nokia licks RIM with Blackberry ban threat	Stefan Mileschin	WebNews	0	29th November 2012 09:16
Microsoft Security Intelligence Report Warns of Ongoing Conficker Threat	Stefan Mileschin	WebNews	0	27th April 2012 09:27
Firefox Now Serious Threat to IE in Europe	jmke	WebNews	0	16th July 2007 09:28
Microsoft Security Patch Can Cause Security Issues to Internet Explorer	jmke	WebNews	0	18th August 2006 11:09
IE exploits top web security threat list	jmke	WebNews	0	2nd November 2004 18:31