Slashdot Mirror
Some Smart Meters Broadcast Readings in the Clear
alphadogg writes "University of South Carolina have discovered that some types of electricity meter are broadcasting unencrypted information that, with the right software, would enable eavesdroppers to determine whether you're at home. The meters, called AMR (automatic meter reading) in the utility industry, are a first-generation smart meter technology and they are installed in one third of American homes and businesses. They are intended to make it easy for utilities to collect meter readings. Instead of requiring access to your home, workers need simply drive or walk by a house with a handheld terminal and the current meter reading can be received."
Perhaps more distressing, given trends in 4th amendment interpretation, I bet the transmissions are open game for law enforcement.
Or just asleep.. Or they have a low power foot print most of the time.
Cars in the driveway and no one answering the door is a more accuarate and low-tech way to do this.
---- Booth was a patriot ----
So let me get this straight... if somebody wants to know when you're home, they're going to run out and buy a radio and learn to use it, then sniff your meter's transmissions, then analyse them for periodic components, then correlate that with known patterns... rather than just waiting to watch you leave?
You do not have a moral or legal right to do absolutely anything you want.
While it does seem a little paranoid to think burglars and the like are going to sit in your bushes monitoring your power usage, it wouldn't be hard to simply encrypt the transmissions. In today's society this seems like a no-brainer.
You can also tell if someone is home through unencrypted lightbulb signals through windows.
So, next time, in addition to getting tin foil for the hats, you should get non reflective paint for the whole structure, shock isolating floating foundation for the entire home and special noise cancelling speakers attached to the plumbing. Else, gasp! thieves will know when you are in and when you are not in your own home.
sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
This information has never been secret. Most electricity meters are mounted on the outside of the structure in an easily accessible location with dials that are easy to read at a distance with a pair of binoculars. This is by design, allowing the utility companies to do meter readings as efficiently as possible.
Am I the only one wondering how easy it would be to spoof your or others readings for nefarious purposes?
There's the implicit statement that all smart meters are deployed the same way. Since this experiment shows that one smart meter vendor is producing sniffable traffic. It does not show that all vendors are in the same situation.
Some vendors are better than others in this regard.
As a meter reader who actually reads some of these AMR meters, I'd say using the information for burglaries is a stretch. Even if you get the info it only includes meter number and reading. Since the address is not listed I can only see it being useful in rural areas where houses are far enough apart to be able to tell which house it is without physically checking the meter. For reference, I can pick up AMR meters in rural areas from about 1/2 to 3/4 a mile away while driving 50 mph. I see the greater nefarious use would be to send out a slightly stronger signal to send a different reading and hence lower your utility bill. Since this process would be wireless and most likely involve doing nothing to the physical meter itself it would be near impossible to catch it as tampering. Also since in my area AMR meters are almost never physically checked, even a physical modification would likely go unnoticed for years.
Inherited Will. The Destiny of the Age, and the Dreams of the People. These are things that will not be stopped. As l
Yes, they are. You don't 'own' the meter. If you want to block the transmission, just jam the signal.
“He’s not deformed, he’s just drunk!”
I know something about these meters. First of all, they give you the current meter reading in KWH, not how much current is currently in use; you would have to take multiple samples to get that.
Second of all, they are very omnidirectional and have a reasonable range, so someone can read them from the street on most houses. Which means they get several houses with any reader. The unique identifier is easily determinable, in our case it's stamped on the back side of the meter, all you have to do is pull it off the base and check it. The meters are programmed with a route and subroute number, and respond to an unencrypted transmission asking for their info by broadcasting it.
As far as the 4th amendment is concerned, the police would need a warrant to get all the bits and pieces together to connect a particular meter with a particular house in the first place.
Finally, the readers cost us roughly $8k each. While I'm sure it's doable cheaper, I don't see people putting that kind of effort into this. Especially as the same info can be gotten by walking up and looking at the meter. While I certainly have my concerns of security for real 'smart meters' these are not what we should focus on.
The absolute worst thing about the installation of smart meters in these parts is the endless string of "news stories" by our local community "newspaper"* about the significant health risks posed by smart meters.
It finally reached the point where, lacking any scientific evidence, they're now resorting to trying to outlaw Smart Meters, WIFI, and cel towers because of "electromagnetic hypersensitivity (EHS). Patients with EHS suffer a variety of symptoms from heart palpitations to migraines they claim are caused by radio frequency radiation.
"You know that western medicine doctors don't know anything about EHS and my naturopath actually tested me. On the sole of the foot on the inside there is a point where he tests the sensitivity to electromagnetic fields. It was very painful and he found out that I am very sensitive," Nemetzade says.
* scare quotes used because, well, the rag is actually pretty scary.
Three Squirrels
Really? What kind of logic is that?
Just because it has to be displayed does not mean it has to be visible from public property or that people who want to know may trespass without consequence.
Meter readers are obviously an exception to the above as this would be a condition of service.
With even cheaper equipment, cops can detect your grow lights from IR emissions.
Pot farms usually bypass their meter so their high usage doesn't show up. Utilities already report irregular usage to Law Enforcement based on their normal readings. There's no need for LE to go war driving. The utilities furnish that information already.
Using cryptography will be nightmare here: who gets the keys to decrypt? Too many people. Keys will be compromised and will have to be updated. How? Should the smart meter be remotely controlled by the utility? That is smelling bad.
Yes, they are. You don't 'own' the meter. If you want to block the transmission, just jam the signal.
Yeah, that will show those cops! It's not like the reading can be read with the naked eye from outside my house, after all.
What the hell for? They can buy a thermal imager for $1200. You could probably modify a cell phone's camera to make a cheap-ass IR camera for a lot less. You might need no more than a filter to block visible light.
There is already a cheap way to do that for digital SLR camera using photographic film to block visible light. My hobbyist friend does it to take infrared photography. It is so amazing how the world looks in infrared: http://en.wikipedia.org/wiki/Infrared_photography
The summary is about concern over broadcasting the signal and the police tapping into it. So was my comment, which seemed to offend a moderator. If they actually have to come and read the meter, it kinda blows their cover. More likely they would simply ask the electric company to cough up a copy of the bill, and the electric company has no interest in your 4th amendments rights, which aren't being violated in this instance anyway. Hope that clears things up a bit, in case you weren't just being silly.
“He’s not deformed, he’s just drunk!”
This article or study is "not so clever." If someone wants to identify whether or not someone is home it'd be much easier to monitor activity at the house than it would be to try and track equipment cycling on or off via a smart meter. Sure we could install all kinds of encryption on a meter, but for what purpose? -- drive up costs of a utility meter! This is one of the dumbest articles I've ever seen.
Other ways to tell if someone is home
1. Sniff internet packets
2. check facebook
2. knock on the door
3. look for cars in the driveway
4. look if lights are on in the house
5. looking for movement in the house
6. check for strong cell phone signal coming out of the house
7. listen for voices
8. use infrared technology
9. call the neighbors and ask them
10. check the actual electric or water meter (this is probably the least reliable of all methods above)
Typically people looking to get into other peoples houses aren't trying to phreak weak data from a wireless electric meter. Please stop writing crap like this so I don't have to pay an extra $1,000 dollars a year to have a triple encrypted electric meter with firewalled dedicated internet connection.
People act like hackers aren't hacking though encryption and other security measures. Nothing in the digital age is 100% safe or secure. Get over it. It's still the best solution with the least risk. Electric meters are the least of our worries.
That is not the wavelength you're looking for. Cheap cameras can see into the near infrared, not the mid/long infrared of thermal imaging.
Dilbert RSS feed
Pot farms usually bypass their meter so their high usage doesn't show up.
Exactly! - Or use generators for the additional power needed.
Heard of a case where a pot farm was hidden in an apartment, complete with a generator in a soundproofed box and its exhaust fed into the main sewer. The grow rooms were waterproofed as well, making sure the people on the floor below didn't get nasty stains on their ceiling. It was found only by accident. The pot apartment had average water usage, normal power usage and an untampered meter.
"For every complex problem, there is a solution that is simple, neat, and wrong." -- H.L. Mencken (1880-1956) --
Boy, this story is so familiar... just can't quite recall where I saw it before.
Which means the BOM cost is probably around $400. The massive markup is passed along to the suck^H^H^H^H customers, so MomCorp doesn't give a crap about being soaked.
This requires a warrant (Kyllo v. United States)
I browse on +1 so AC's need not respond, I won't see it.
AMR (automatic meter reading) just send metering data via mobile phone or other means.
That is not a smart meter.
However I agree traffic should be encrypted.
Cost free eBook I read (by iBook/Kobo/Amazon/ObookO/Gutenberg etc.): "The Green Odyssey" by Philip Jose Farmer.
This requires a warrant (Kyllo v. United States)
Thieves get warrants? Who knew?
This is interesting but has existed for years - DON'T just mod me down - finish reading, please.
What's new is the Duke Energy "New Awesome Smart Meter That Makes Your Home More Power-Friendly" meter (that's literally how they present it and it's suggested to be just that on the meter itself).
This meter is a replacement that all customers (at least in the Greater Cincinnati Tri-State area) are required to let Duke come out and swap. Oh, they charge you for the swap, too.
If you'll look at the poles with transformers installed on them, there's a new little grey box that's installed with an attachment to the 240v low side as well as the high voltage side (bypassing the transformer).
This new setup allows Duke to remotely signal (by wire) your meter to read it, AND (this is what they're not telling people), shut it of remotely if your bills aren't current (no pun intended). No more dogs protecting your power meter from a pull, less Humans needed hired for this manual labor, faster disconnect and reconnect, etc.
This is something other power companies will follow suit with soon, so I'm sure people needn't worry too much about this wireless power meter issue that's existed for years and hasn't been knowingly exploited before now.
So we have meters that can remotely command thermostat set-back, and others that can romotely disconnect power entirely. If any of these have security problems on the command side, they've essentially opened the door to crooks (or cops) cutting off your power, likely with no evidence trail created. If they shut it off and nobody opens a curtain it's a pretty safe bet that there's nobody home.
Oh, I'm sorry sir, I thought you were referring to me, Mr. Wensleydale.
you mean like those little light timers?