Slashdot Mirror


Hacking Lightbulbs To Cause a Sustained Blackout

An anonymous reader writes "Researcher Nitesh Dhanjani just published an evaluation of the Philips Hue wireless lighting system that is available at Apple stores (and online). These lightbulbs come with a wireless bridge that you can control from your iPhone. Dhanjani has published a video demonstrating a vulnerability he found that can be exploited by malware to cause a sustained blackout. The video shows how the malware script can continuously turn the light bulbs off. Dhanjani also discusses other scenarios such as the systems' tie in with IFTTT (If This Then That) to cause a blackout by tagging a Facebook user on a completely black photo. Lots of interesting ideas on security vulnerabilities targeting future malware and smart devices. The paper can be downloaded here (PDF)."

15 of 115 comments (clear)

  1. Question by djupedal · · Score: 4, Insightful

    Why do I feel like I'm standing in line at the supermarket reading the cover of some tabloid rag right now...

    1. Re:Question by Anonymous Coward · · Score: 4, Insightful

      Why do I feel like I'm standing in line at the supermarket reading the cover of some tabloid rag right now...

      Hard to say.

      Perhaps it's because you didn't recognize the extremely important but implicit message that unless we (the engineers) pay more attention to what we're doing, then our products can be susceptible to widespread mayhem.

      It's a pretty relevant topic as everything around us becomes more and more networked.

    2. Re:Question by Princeofcups · · Score: 5, Insightful

      Why do I feel like I'm standing in line at the supermarket reading the cover of some tabloid rag right now...

      Maybe it's time add a third level of moderation to slashdot. Have at least 5 high karma readers edit all article posts before they go up.
      - Spelling/grammar corrections
      - Weasel word removal
      - Check/supply links
      - Accurate titles/summaries

      God knows the current batch of mods aren't doing their job.

      --
      The only thing worse than a Democrat is a Republican.
  2. wireless basic needs by schneidafunk · · Score: 3, Insightful

    It seems to me a bit frivolous to be connecting lights, toilets, refrigerators and whatnot to wireless technology.

    --
    Some people die at 25 and aren't buried until 75. -Benjamin Franklin
    1. Re:wireless basic needs by kheldan · · Score: 2

      That's because it's not only frivolous, it's flat-out stupid.
      Don't know about anyone else, but I don't need or want so-called "smart" appliances or lightbulbs. I don't want someone else deciding when I can dry my clothes, or run my air conditioner, or be able to make my lights go on and off, or maybe hack my refrigerator and ruin hundreds of dollars of food "for the lulz". If I can't maintain direct control over things in my living space, then they need to go.

      --
      Are YOU using the TOOL, or is the TOOL using YOU? Think about it!
  3. SUSTAINED BLACKOUT!!! OH NOES!!!! by Score+Whore · · Score: 5, Insightful

    Turning off a single or set of light bulbs is not a "sustained blackout." Shutdown all electrical systems in a city (or at least a neighborhood) and maybe you can start talking blackout. But turning off a couple of light bulbs isn't even inconvenient. What kind of hyperbolic dipshittery headline writing is this?

    1. Re:SUSTAINED BLACKOUT!!! OH NOES!!!! by Anonymous Coward · · Score: 2, Informative

      Actually, the term blackout originally referred to everyone shutting off their lights during an air raid,

    2. Re:SUSTAINED BLACKOUT!!! OH NOES!!!! by Ol+Olsoc · · Score: 2

      Turning off a single or set of light bulbs is not a "sustained blackout." Shutdown all electrical systems in a city (or at least a neighborhood) and maybe you can start talking blackout. But turning off a couple of light bulbs isn't even inconvenient. What kind of hyperbolic dipshittery headline writing is this?

      Walking down a stairwell and having the lights go out is hardly hyperbolic dipshittery. But rather than just look at a situation and declaring people asshats if they are concerned, have a little imagination. If we are connecting our lights to the internet, it just shows that whatever is connected to the internet will suffer the same problems as anything else connected to it.

      Lights are only one thing. There are refrigerators, locks furnaces, toilets, all manner of things that someone thought we needed to control from wherever we are.

      I'm looking forward to the "Norton Home Appliance Antivirus Suite".

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
  4. IFTTT/facebook tie-in is a bit alarmist? by fatgraham · · Score: 2

    Apologies in advance for the trolling but that section seems a bit unnecessary... it's basically saying "if something bad happens to the service you use, something bad can happen to you"?

    The light device has little to do with the hypothetical compromise of a cloud service IMO. As well as the feature of changing hue from another image. "Blackout" is a little alarmist when it's just doing what it's told to do...

    The hack/comprimised access itself is neat though.

  5. Rightey-O by Impy+the+Impiuos+Imp · · Score: 2

    I guess I should maybe rethink my purchase of my Philips Wireless Beltbuckle.

    --
    (-1: Post disagrees with my already-settled worldview) is not a valid mod option.
  6. Re:Less worried about blackouts by K.+S.+Kyosuke · · Score: 2

    Why seizures when you can re-program their brains?

    --
    Ezekiel 23:20
  7. multiple reasons not to include wireless by Covalent · · Score: 2

    Security issues aside, wireless connectivity uses some small amount of power. To me this is energy wasting of the highest order. My lightbulbs constantly listening for the one time per month that maybe I want to turn them on from my phone? Yes please and a side of mountain top removal coal mining please!

    --
    Great warrior...hrmph! Wars not make one great.
  8. Hysteria Much? by s122604 · · Score: 5, Informative

    The hack described in the article is interesting from a technical perspective, but the use of the term "blackout" is hysterical and misleading.

    When I think of the term "blackout", I take that to mean no more 120/240 in any of my sockets.

    Yes, appliance hacks are something that we all should think about as more and more of the ubiquitous appliances, like lights, HVAC, water and sewer, that truly make the modern world function come online, but cmon....

  9. Re:who needs this?! by canadiannomad · · Score: 2

    I prefer the ideas generated around fiscal policy.....

    MANAGEMENT CONSULTANT:
    Um listen, if we could, er, for a moment move on to the subject of fiscal policy -

    FORD:
    ”Fiscal Policy”?!

    MANAGEMENT CONSULTANT:
    Yes.

    FORD:
    How can you have money if none of you actually produce anything? It doesn’t grow on trees you know!

    MANAGEMENT CONSULTANT:
    You know If you would allow me to continue!

    CAPTAIN:
    Yes let him to continue.

    MANAGEMENT CONSULTANT:
    Since we decided a few weeks ago to adopt leaves as legal tender, we have, of course all become immensely rich.

    FORD:
    No really? Really?

    CROWD MEMBERS:
    Yes, very good move

    MANAGEMENT CONSULTANT:
    But, we have also run into a small inflation problem on account of the high level of leaf availability. Which means that I gather the current going rate has something like three major deciduous forests buying one ship’s peanut. So, um, in order to obviate this problem and effectively revalue the leaf, we are about to embark on an extensive defoliation campaign, and um, burn down all the forests. I think that’s a sensible move don’t you?

    MARKETING GIRL:
    That makes economic sense.

    [Murmurs of agreement from crowd]

    --
    Hmm, the humour and sarcasm seem to have been be lost on you.
  10. Re:Power Companies by plover · · Score: 2

    That's certainly not how the Smart Grid has to work.

    One way it could work is for you to establish the rate you're willing to pay. A Smart Meter can tell your household appliances "The price of electricity from 4-8PM will follow this schedule: first 2 kWh are $0.20 each. Next 1 kWh is $0.40. Additional kWh are $5.00 each." You can then tell your A/C to "run for no more than 40 minutes per hour whenever the price > $2.00 / kWh", or "run the A/C for no more than $1.00 each hour." Demand pricing would allow you to decide for yourself "I don't want to pay these prices for extra A/C" or "I'm rich and want 70 degrees this afternoon, dammit." Scheduled pricing would allow people on very tight budgets a way to choose between their needs and their wants: TV and a fan, or small window A/C, but maybe not both.

    Today I don't have the choice of "spend money and stay cool" or not. Instead, I have a system very much like the one described in the article you quoted. And I'm OK with it.

    I had my electric co-op install a peak load controller on my A/C a decade ago. When the electric company sends their signal, the load controller shuts off my A/C for 20 minutes out of each hour. At least 10,000 other co-op members are part of the program as well, and together we have deferred the purchase of a new electric generator by over 10 years - and kept our overall electric rates low as well. My other benefit is that all the electricity my controlled A/C uses is sold to me through a separate meter at their cost: $0.055 / kWh, instead of $0.115 / kWh. My house might go up to a slightly uncomfortable 80 degrees when it's 100 degrees outside, but it knocks at least a hundred dollars off my bill a year. And the program is voluntary; I could call them and have them remove the controller, but then my bill would go back up.

    --
    John