Samsung, LG Smartwatches Give Up Personal Data To Researchers
An anonymous reader sends word that security researchers have been able to extract personal information from a pair of smartwatches: the LG G Watch and the Samsung Gear 2 Neo. The G Watch gave up calendar information, pedometer data, and the user's email address, while the Gear 2 Neo gave up health data, emails, messages, and contact information. The researchers said it wasn't very difficult to get the data, in part because it wasn't encrypted. "The Gear 2 Neo uses Samsung's Tizen operating system, while the LG G Watch is one of several models that uses Google's Android Wear operating system. The researchers obtained the data both by poking through the watches' files and finding traces of watch activity on the Samsung Android smartphone to which they were linked. The researchers also have begun testing the Apple Watch."
The researchers obtained the data both by poking through the watches' files and finding traces of watch activity on the Samsung Android smartphone to which they were linked.
So, they had both the watch and the connected phone. I'm not really concerned about this. If this was a remote access thing, I'd be a little worried.
Does anyone actually buy them? I think a smart watch is redundant, until it entirely be able to replace a cell phone. To better understand the market I did some quick research - http://www.smartwatchgroup.com... So they sold 6.8 millions of these gadgets in 2014 in US. I'm not impressed with these numbers. The only actual usage so far is: - fitness crowd - cool people that buy anything new that comes out for bragging rights - gifts for people who already have everything else
These researchers had physical control of the hardware in question and were able to extract unencrypted data? That must have been difficult.
You can't do that with an iPhone. Hardware access that's in a locked mode shouldn't necessarily give you access to encrypted data. Oh, in one case at least it simply wasn't encrypted. Health data. Nice.
Make sure everyone's vote counts: Verified Voting
It's less about who cares but more about the fact these companies continue to sell our data without asking if they can or at least telling us they are going to.
This also leaves the door open to malware on the phone to scrap up this personal data such as address, email and all your contacts and send it to Sasha Konovalov in Russia.