Abusing the Internet of Things

HBGary Federal, 221
health apps and medical record data, 241
Heartbleed, 240-240, 248
hijacking credentials, 95-100
(see also password security)
home security (see baby monitors, SmartThings)
HomeKit, 239
hotel room key cards (see door locks)
hue lighting system, 2-36
and Amazon Echo, 236
drive-by blackouts, 13
If This Then That (IFTTT) service, 32-35
information leakage, 12-13
interoperability with SmartThings, 107-111
iOS app control, 16-30
password security, 14
perpetual blackouts from malware, 25-30
setup, 4-12
setup with iOS app, 16-30
website interface control, 4-16

I
iCloud celebrity hacking attack, 238
If This Then That (IFTTT), 32-35, 199, 239
information leakages, 12-13
passwords, 14-16
integrated development environment (IDE), 101,
119
interspace communication, 246-247
iOS
hue lighting system for, 16-30
jailbreak community, 123
token stealing from mobile devices, 25
URL schemes, 24
iOS apps
Kevo Kwikset door lock, 45, 50-57
SmartThings (see SmartThings)
WeMo baby monitor (see WeMo baby moni-
tor)
WeMo Switch, 78-83
IoT cloud-based infrastructure attacks, 238-239
iPhones, 48
(see also iOS apps)

J
jailbreaking, 123
Jobs, Steve, 189
Joint Test Action Group (JTAG), 215

K

Kelly, Isaac, 82

Kevo Kwikset door lock, 45, 50-57

key cards (see door locks)

KillerBee framework, 30

L

leakages (see information leakages)

leaked keys, 141

LIFX lightbulbs, 215

LightBlue iOS app, 48

lighting (see hue lighting system)

Linux, 124, 139, 207

littleBits (see cloudBit)

lock bumping, 54

locks (see door locks)

long-term key (LTK), 49

look-ahead value, 40

M

MAC address, 26

magnetic stripes, 39-41

malicious apps, 166

malware, 52, 177

perpetual blackouts from, 25-30

and WeMo baby monitor, 76

and WeMo Switch, 83

man-in-the-middle attacks, 105-106, 119, 150

Manchester encoding, 161

master/slave devices, 47

medical records data, 241

Michéle, Benjamin, 123

Microsoft, 77, 83, 234

Miller, Charlie, 163, 166-169

Minicom, 215

modulation, 160

monitoring devices (see baby monitors)

monoculture, 245

mood messages, 144

Mulliner, Colin, 123

Mundie, Craig, 77

Musk, Elon, 170, 223, 247

N

NASA, 246

native binary apps, 124

Nest Thermostat, 240

Nimda worm, 77

INDEX 267