They might offer convenience or potential cost savings, but Internet-connected home appliances may also create security risks.
As a growing number of Internet-connected home appliances hit the market, David Bryan and Daniel Crowley worry that digital ne’er-do-wells will get new ways to take control of these devices, unlocking your house, running up your heating bill, flushing your toilet—or worse—from afar.
Bryan and Crowley, both security researchers at Trustwave Holdings, have been trying to sound this alarm since they heard about the Lockitron, a $179 gadget designed to fit on a standard deadbolt and allow you to lock or unlock your home from your smartphone. At the time, the device had not yet begun shipping to customers, but it piqued Bryan and Crowley’s curiosity. They figured they’d try out other “smart” devices while they were at it, and over the past several months they’ve found that nearly all of them, including lights, a scale, and a toilet, had significant security shortcomings.