Slashdot Mirror
Security Firm Predicts "Murder By Internet-Connected Devices"
Curseyoukhan writes "Infosec vendor IID (Internet Identity) probably hopes that by the time 2014 rolls around no one will remember the prediction it just made. That is the year it says we will see the first murder via internet connected device. The ability to do this has been around for quite some time but the company won't say why it hasn't happened yet. Probably because that would have screwed up their fear marketing. CIO blogger challenges them to a $10K bet over their claim."
...but it looks like [SA]HatfulOfHollow has finally completed his killer device.... http://www.bash.org/?4281
Goatse certainly came close
Table-ized A.I.
And how many drone strikes have been carried out over the past 10 years?
The drones aren't connected to the internet, only military networks. Any peripheral traffic that happens to route anywhere out into the internet is on a secured VPN... and at that, it's only sensitive material, nothing that'll say, start world war three. The same cannot be said for, say, nuclear reactors and related industrial equipment (like centrifuges)... which apparently are. All that out of the way, who really cares what a couple of rich dudes do with their gambling money? But in the larger sense, yes, it will happen eventually as if there's one thing you can bet on long-term is that we'll find more creative ways to kill each other...
All this boils down to is one person betting on "sooner" and the other on "later".
#fuckbeta #iamslashdot #dicemustdie
Murder via internet (and a lot more), committed by someone who is dead. "Daemon" by Daniel Suarez. Interesting read. There is also a sequel, "Freedom".
Heisenberg may have been here.
Most remotely-triggered bombs made by extremists of various kinds are triggered by cellphones - so true in fact that some countries shut down their cell networks preventively. Cellphones use some kind of radio network and proprietary protocol for the last mile, but essentially, beyond that, telephony is entirely IP-based these days. You can even call a cellphone from a PC now with programs like Skype.
So I think essentially all recent bombing attacks can be called "murder by internet-connected devices".
"A door is what a dog is perpetually on the wrong side of" - Ogden Nash
Hasn't Apple already murdered tons of people people in the Australian desert simply by sticking "Mildura" in the wrong spot? I'm sure of it. Either that or those Maps "victims" were awfully inconvenienced, probably missing their favorite reality TV shows, which is nearly as bad.
One major vector that would be ripe for abuse would be a combination of "self driving car", + "malicious GPS map update".
Eg, the self driving car would have sensors to determine it is on an actual road, of course. But that doesn't stop the car from autodriving off an unfinished bypass rampway, when its map software says the road is finished.
This wouldn't necessarily be able to target a specific vehicle without a pretty sophisticated man in the middle attack, (how you would do that is questionable in and of itself, perhaps if you put the middleman directly ON the car? Malicious android device, or a raspberry pi? But if you do that, why not just put a pipebomb like normal terrorists would?) But would work with a remote DNS injection attack against an entire vehicle product line, with disasterous effects all over. The attacker just needs to know when vehicles contact the map server, poison the DNS for the server, and then serve the malicious maps to updating vehicles when they connect.
IID predicts for 2013 that criminals will leverage networked healthcare devices to carry out murders. My counter-theory is, that the first murder probably has already occurred; we and the police just didn't notice it. So 2013 may be the year the first murder via Internet device is proven.
During a BKA (German version of the FBI) conference, i made a remark that got me nationwide media attention in 2000: "In the Internet you'll find anything but murder." I wish i could say this with the same conviction today as i did back then (http://www.heise.de/newsticker/meldung/BKA-hat-Muehe-mit-der-Internet-Kriminalitaet-16354.html).
I think those happy days Daniel Suarez envisioned have already arrived.
An "Infosec" vendor that no one knows and cares makes big prediction about how future hackers would kill you with compromised Internet devices. You need protection! We offer it! Remember our name so we stay relevant!
I would probably consider this news (that is in no way interesting and informative) if this prediction is made by Symantec, McAfee or Kaspersky. Put some obscure "IID" here and it just smells so slash-PR.