Tuesday, December 30, 2014

Hello, hackers: Why firmware may open the way for backdoors and poor encryption

Everyone loves technology, right? There are smart houses that allow homeowners to turn off and on appliances without even being home. But, did you know that the computer chip that powers all that technology to turn on devices in your home may put you in greater risk of having your personal information stolen? What many homeowners do not know is that the firmware contained on a system on-chip that can be used by other embedded devices. However, did you know that this firmware also opens the door to poor encryption practices and allows hackers to access software on for devices?

It may not matter that some of this software may be the only program available for a hacker to gain access to a webcam, microphone, printer, router or fax machine. How safe is a web camera that was just purchased? In one study, a technology-focused graduate school developed a web crawler to obtain more than 30,000 images from manufacturers’ websites, after they listed webcams for sale.

What were the main issues that made webcams security Hazards?

Is your website really secure? One reason why hackers were able to successfully access firmware is that the encryption mechanisms failed to operate correctly Websites were not encrypted, as specified. Out of the more 123 products tested, 38 were found to have security risks and vulnerabilities needed to be fixed. What leads to products having security flaws and allowing hackers into critical systems?

  • Being first and cheap is not a good combination. In a bid to be the first new product on a shelf, manufacturers will rush consumer products on the market. But, did you know that cheap and first does not necessarily mean you have a quality product that will keep your sensitive information safe from hackers?
  • Is the business offering the firmware up-to-date on all the latest security practices? It is better to get updates and patches on a regular, frequent schedule. By installing automatically, a patch can protect a computer from viruses and hackers.
  • Has the company offering the firmware tested their product to insure that it is not flawed and then distributed into firmware that is sold in different products on the Internet
  • Different firmware images use digital certificates to enable encryption. But, it does not mean that these certificates in firmware are always safe. Some hackers have gained access by having self-signed certificates that were using a private RSA encryption code. Did you know that of the 35,000 devices that were found online, they were using less than secure certificates?

No comments:

Post a Comment