Article - everything can be hacked

[Skidmark]

Good article, with some helpful advice. I didn't know we had reached the point where even power cords could be suspect.

http://www.slate.com/articles/technology/technology/2013/11/hacking_iphones_google_glass_and_fitbits_how_to_protect_yourself_when_everything.html

[Franz Maurer]

sad but true

[Brianguy]

I'm pretty sure my walmart power strip is safe from malware but it's so cheap it might start a fire

[Peter.Steele]

I didn't know we had reached the point where even power cords could be suspect.

I'm pretty sure that we still haven't.

[LittleOldLady]

This is the reason I never went wireless and do not own a 'smart' phone.

[catmman]

Real basic stuff trying to scare people. Guess it depends what you mean by hack.

[Skidmark]

More of this, paid for by our tax dollars:

http://www.sfgate.com/business/technology/article/Report-NSA-intercepts-computer-deliveries-5099822.php

[njineermike]

I'm pretty sure that we still haven't.

I'm pretty skeptical of that myself.

[Skidmark]

I'm pretty skeptical of that myself.

Today's article notes monitor cables with radio transmitters, to broadcast the data they convey between computer and display.

[njineermike]

Today's article notes monitor cables with radio transmitters, to broadcast the data they convey between computer and display.

Wasn't talking about monitor cables.

[ocabj]

Compromising power strips is a bit exaggerated. There are some "power strips" that have embedded OS'es in them along with a NIC or serial interface that allows certain things to be checked such as power draw, temperature, etc. These are designed to be used in a datacenter and any datacenter architected correctly will have such devices on a private VLAN.

Security of HVAC infrastructure is a hot topic right now since a lot of HVAC devices are meant to be remotely and centrally controlled by a HVAC management server/system via network (TCP/IP). Unfortunately, some organizations actually have HVAC devices on publicly routed networks leaving them open for attack. Again, an organization should be placing HVAC on it's own RFC 1918 VLAN to protect it from attack.

[njineermike]

Compromising power strips is a bit exaggerated. There are some "power strips" that have embedded OS'es in them along with a NIC or serial interface that allows certain things to be checked such as power draw, temperature, etc. These are designed to be used in a datacenter and any datacenter architected correctly will have such devices on a private VLAN.

Security of HVAC infrastructure is a hot topic right now since a lot of HVAC devices are meant to be remotely and centrally controlled by a HVAC management server/system via network (TCP/IP). Unfortunately, some organizations actually have HVAC devices on publicly routed networks leaving them open for attack. Again, an organization should be placing HVAC on it's own RFC 1918 VLAN to protect it from attack.

I'm reading a Cisco book on network security right now to stay updated, but it won't help if the equipment was compromised before we got it.

[chiefcrash]

Compromising power strips is a bit exaggerated. There are some "power strips" that have embedded OS'es in them along with a NIC or serial interface that allows certain things to be checked such as power draw, temperature, etc. These are designed to be used in a datacenter and any datacenter architected correctly will have such devices on a private VLAN.

Security of HVAC infrastructure is a hot topic right now since a lot of HVAC devices are meant to be remotely and centrally controlled by a HVAC management server/system via network (TCP/IP). Unfortunately, some organizations actually have HVAC devices on publicly routed networks leaving them open for attack. Again, an organization should be placing HVAC on it's own RFC 1918 VLAN to protect it from attack.

Compromising power strips may be a bit far fetched, but making something that *looks* like a power strip has been done: http://gizmodo.com/5928189/this-inno...mputer-network

[njineermike]

I'm trying to find it right now, but i read an article a few years ago about someone who took apart a cable that connects the Ethernet card to the motherboard in his computer and had pics of a chip he claimed was a hardwired key logger and access point. Everybody called him crazy then. Not looking so crazy right now. As soon as I find it, I'll post the link.

[GM_77]

Although I highly question the journalistic integrity of the article, especially what is qualified as hacking... The recent NSA revelations kinda bring a little more truth to the possibilities.