Slashdot Mirror


Smart Lights, Speakers, Thermostats, Cameras and Other IoT Devices Are Being Increasingly Used as a Means For Harassment, Monitoring, and Revenge (nytimes.com)

Smart home devices are supposed to bring convenience to people's lives, but increasingly, their unintended consequences are surfacing, and are being exploited to harass others, an investigation by The New York Times has found. [Editor's note: the link maybe paywalled; syndicated source.] From the report: In more than 30 interviews with The New York Times, domestic abuse victims, their lawyers, shelter workers and emergency responders described how the technology was becoming an alarming new tool. Abusers -- using apps on their smartphones, which are connected to the internet-enabled devices -- would remotely control everyday objects in the home, sometimes to watch and listen, other times to scare or show power. Even after a partner had left the home, the devices often stayed and continued to be used to intimidate and confuse.

For victims and emergency responders, the experiences were often aggravated by a lack of knowledge about how smart technology works, how much power the other person had over the devices, how to legally deal with the behavior and how to make it stop. "People have started to raise their hands in trainings and ask what to do about this," Erica Olsen, director of the Safety Net Project at the National Network to End Domestic Violence, said of sessions she holds about technology and abuse. She said she was wary of discussing the misuse of emerging technologies because "we don't want to introduce the idea to the world, but now that it's become so prevalent, the cat's out of the bag."

10 of 174 comments (clear)

  1. IoC by dehachel12 · · Score: 4, Insightful

    Internet of Crap. They usually are some cheap things released onto the market without serious security protection(who didn't see THAT coming ?). I'll never use them.

    1. Re:IoC by 50000BTU_barbecue · · Score: 4, Insightful

      modern dehumidifiers are like the old CF bulbs in that they do not last.

      I was just at my parent's place and the Electrohome dehumidifier from the 1970s is still in the basement, chugging away.

      It may not be as energy efficient to operate, but considering it was built once almost 4 decades ago and no one needs to buy a new one, I think overall it's ahead of the game.

      It is built so sturdily I can easily sit on it, and the cooling coils are so thick and stiff I can't move them easily.

      Contrast this to the modern one I have in my house, the housing appears to be made from old pie plates and the cooling coil is so flimsy it shakes back and forth just from wiggling the unit.

      --
      Mostly random stuff.
    2. Re:IoC by Solandri · · Score: 4, Interesting

      The problem isn't the item or their network capability. These things would be fine if you were only able to access and control them over your LAN. The problem is some idiot thought it would be cool to be able to access them over the Internet. As a result the devices connect to some server on the Internet (no doubt allowing the manufacturer to collect marketing info), waiting for your smartphone app to contact the server and connect to the devices remotely.

      The way they should work is they should never connect to the Internet, and should limit their network activity to your LAN. If you want to control them from outside your home, you should set up a VPN server on your router (many of them come with one built-in now), and use the VPN client on your phone to access your LAN from the Internet, giving you access to those devices.

      Unfortunately, this is beyond the technical capabilities of the vast majority of users, and they don't want to learn how to do it, so we end up with these IoT devices which access the Internet directly. Same reason everyone sells their soul and shares their news and photos on Facebook, instead of setting up their own personal website/blog.

    3. Re:IoC by b0s0z0ku · · Score: 4, Interesting

      Funny thing is that dumb phones and hardwired phones are still better at being phones than many smartphones today. Also, the actually wired phones don't blast your noggin with microwave radiation.

  2. its much worse than that. by nimbius · · Score: 3, Interesting

    As any Slashdotter knows, smart lights, switches, and power relays are poorly regulated and secured.
    If a coordinated attack were to take place against thousands, or millions of these devices,
    they absolutely could be used to shutter an electric grid in under a minute by inducing a triplen wave:

    https://electricalbaba.com/tri...

    --
    Good people go to bed earlier.
  3. Re:Stupid by Fly+Swatter · · Score: 4, Insightful

    You have 2 competitors and one has no security, they don't sell any products and the bar is raised.

    Wtf is 2018.

    You are right, it is 2018. So you have 100 competitors and one has security but costs more than the other 99 knockoffs that all came from the same factory. They don't sell any products and go out of business. That is 2018.

  4. weasel words by cascadingstylesheet · · Score: 4, Insightful

    "Increasingly", "many", "more"

    How many? How do you know?

    It makes a great story, but "many" of these kinds of stories don't have much to back them up, as to the size of the problem.

    It might be helpful to say "X percent of DV cases in {area} in 2017 involved smart home devices" or something.

  5. Re:Hate to victim blame by worf_mo · · Score: 4, Insightful

    Hate to victim blame, but anyone who buys an IoT thingy and actually plugs it in to the internet is all but asking for it.

    Not all victims bought or installed the IoT devices in the first place. This is often a case of an abusive person that installs an IoT device in their (ex) home to keep their (ex) partner under surveillance or to harass them.

    FTA:

    Usually, one person in a relationship takes charge of putting in the technology, knows how it works and has all the passwords. This gives that person the power to turn the technology against the other person.

  6. Advice to Victims by omfglearntoplay · · Score: 3, Insightful

    Unplug the bad device from the network... as in unplug that wire that isn't power. No wire because WiFi?... realistically 99% of the IoT stuff is WiFi, do this to keep it disconnected:

    1. Change the password on your WiFi router, and do not update it on your IoT devices.

    2. If you don't know how to do that, throw away your old WiFi router and buy a new one, which will force you to make a new password.

  7. Re:Stop being ridiculous by drinkypoo · · Score: 3, Interesting

    Yes, there is someone out there making their partner a veritable slave in their home. But we've taken this so extreme you won't actually ever encounter it in life situation and act like it is everywhere

    The easier it becomes to do a thing, the easier it becomes to do an uncharacteristic thing in a moment of weakness. Little girls don't lock their diaries because even they think the lock can't be broken, any more than people lock their front doors because they think their lock can be broken. It's because lots of people will just walk in, and plenty of people will just take something that isn't nailed down. A simple lock that's easily defeated stops the impulsive, if not the determined.

    These systems are so vulnerable that they practically invite snooping. If someone can get into your camera just by googling the stuff written on it, the odds go way up that they will. This is actually true of malicious actors as well as the bored and curious; a notable portion of them are incompetent.

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"