Abusing the Internet of Things

(Rick Simeone) #1

actions based on conditions such as, “Every time I’m tagged in a photo on Facebook, also
upload it to my Dropbox account.”
IFTTT users can also create recipes for the hue lightbulb system (Figure 1-17)—for exam-
ple, “If I’m tagged in a photo in Facebook, blink my lights to let me know.”


FIGURE 1-17. Hue channel on IFTTT (If This Then That)


The IFTTT service allows the user community to contribute recipes for the various chan-
nels, including hue. With so many recipes readily available, users might not always think
through the implications of how those recipes might be abused by others to influence their
IoT devices.
As an example of an insecure recipe, consider the one shown in Figure 1-18, which allows
the user to change the bulb colors to match a photo he has been tagged in.


IF THIS THEN THAT (IFTTT) 33
Free download pdf