Slashdot Mirror


Security Researcher Gets Threats Over Amazon Review (techcrunch.com)

Kate Conger, reporting for TechCrunch:Amazon retailers sometimes go to extreme lengths to guarantee good reviews, as security developer Matthew Garrett recently discovered when he wrote a one-star review of an internet-connected electric socket. When Garrett politely pointed out that the socket in question was woefully insecure, he received emails from the manufacturer claiming that the review would get employees fired and that other reviewers were campaigning to get Garrett's review taken down. The socket in question is the AuYou Wi-Fi Switch, a $30 device that lets you turn the power from a wall outlet on and off using your phone. [...] But like so many Internet of Things devices, the AuYou switch seems to have a serious security flaw. As Garrett explains in his review, if your phone is connected to your home Wi-Fi, it sends the on/off command to the socket directly. But if you're not home, your phone sends the command to a server in China, which then passes the command along to the socket. "The command packets look like they're encrypted, but in reality there's no real cryptography here at all," Garrett explained in his review. [...] "Just now my boss has blamed me, and he said if I do not remove this bad review, he will quit me. Please help me," the representative wrote. "Could you please change your bad review into good?" Garrett responded that he would update the review if the manufacturer fixed the flaw. The AuYou representative insisted she would be fired if the review was not updated.

5 of 153 comments (clear)

  1. Another review by orlanz · · Score: 4, Funny

    Now you write another review about how horribly the company treats its employees.

  2. Re:Cry me a fucking river by Anonymous Coward · · Score: 5, Funny

    Other than that, 5 stars. Will buy again.

  3. Re:Cry me a fucking river by HornWumpus · · Score: 5, Funny

    You should post that as an Amazon review of the product.

    --
    John McAfee 'It was like that time I hired that Bangkok prostitute; to do my taxes, while I fucked my accountant'
  4. Re:Yep. by nitehawk214 · · Score: 2, Funny

    Wait, shitty IoT security is going to let me become a hawt cyborg?

    In light of this, I may reconsider my position on IoT.

    --
    I'm a good cook. I'm a fantastic eater. - Steven Brust
  5. He'll quit me! by wonkey_monkey · · Score: 4, Funny

    he will quit me

    I wish I knew how to quit you.

    --
    systemd is Roko's Basilisk.