Amazons Key security flaw lets hackers enter your home - Hallo friendsGOOD OF CONEX NEWS, In the article you read this time with the title Amazons Key security flaw lets hackers enter your home, We have prepared this article for you to read and retrieve information therein. Hopefully the contents of postings Article health, Article news, Article sport, Article tips, Article treatment, We write this you can understand. Alright, good read.

Title : Amazons Key security flaw lets hackers enter your home
link : Amazons Key security flaw lets hackers enter your home

Amazons Key security flaw lets hackers enter your home

• Amazon Key lets staff from the retail firm enter your property to drop off a parcel 
• They use an app to unlock your door while a Cloud Cam records the delivery
• A bug lets hackers freeze the recording on an image of your closed front door
• This would allow them to steal your belongings while everything appears normal 

By Tim Collins For Mailonline

Published: 06:20 EST, 17 November 2017 | Updated: 06:22 EST, 17 November 2017

A high tech solution that gives Amazon delivery drivers access to your home could be exploited by criminals, computer security experts have warned.

Amazon Key lets staff from the retail firm enter your property, using an app to unlock your door, while the delivery is recorded via a web-connected camera.

A bug in the software could enable hackers to freeze the images shown on your door being closed securely, while they are really making off with your prized possessions. 

A high tech solution that gives Amazon delivery drivers access to your home could be exploited by criminals. A bug in the software could let hackers freeze images shown of your door being closed securely, while they are really making off with your prized possessions

HOW DOES IT WORK? 

The hack exploits a bug in WiFi devices, that lets nearby attackers overload them with a series of 'deauthorisation' commands. 

This takes the camera temporarily offline, for as long as the attacker keeps sending the command.

Amazon's Cloud Cam responds by freezing on the last frame filmed.

If this was a shot of the door closed and appearing secure, everything would appear normal to anyone watching the live or recorded feed.

Researchers from Seattle based network vulnerability firm Rhino Labs discovered the flaw, which utilises a common issue with many WiFi connected gadgets.

Their demonstration shows a delivery person unlocking the front door to a property with the Amazon Key app.

They open the door, deliver the parcel, and then close the door behind them.

Amazon's delivery drivers would then lock the door via the app.

For the purposes of the demonstration, however, experts show how a simple device composed of a Raspberry Pi minicomputer and a WiFi antenna can be used to freeze the camera on a frame of the locked door.

This would allow a thief to re-enter your home and steal your belongings, while the camera would show that everything was normal. 

The service is currently available in 37 cities and their surrounding areas across the US, with more locations expected to be added.

It is not yet known if the firm plans to expand Key globally.

Speaking to Wired, Rhino Labs founder Ben Caudill said: 'The camera is very much something Amazon is relying on in pitching the security of this as a safe solution.

'Disabling that camera on command is a pretty powerful capability when you’re talking about environments where you’re relying heavily on that being a critical safety mechanism.

'As a partially trusted Amazon delivery person, you can compromise the security of anyone's house you have temporary access to without any logs or entries that would be unusual or suspicious.' 

The hack exploits a bug in WiFi devices, that lets nearby attackers overload them with a series of 'deauthorisation' commands. 

The hack exploits a bug in WiFi devices, that lets nearby attackers overload them with a series of 'deauthorisation' commands. This takes the camera temporarily offline, for as long as the attacker keeps sending the command

This takes the camera temporarily offline, for as long as the attacker keeps sending the command.

Amazon's Cloud Cam responds by freezing on the last frame filmed.

If this was a shot of the door closed and appearing secure, everything would appear normal to anyone watching the live or recorded feed.

Amazon announced in October that Prime members can pay $249.99 (£190) and up for the cloud-controlled camera and lock, which the company offers to install.

Amazon's Cloud Cam responds by freezing on the last frame filmed. If this was a shot of the door closed and appearing secure, everything would appear normal to anyone watching the live or recorded feed

Delivery associates are told to ring a doorbell or knock when they arrive at someone's house. 

If no one greets them, they press 'unlock' in a mobile app, and Amazon checks its systems in an instant to make sure the right associate and package are present.

The camera then streams video to the customer who remotely can watch the in-home delivery take place. 

The associate cannot proceed with other trips until the home is again locked.

About the flaw, a spokesman for Amazon said: 'We currently notify customers if the camera is offline for an extended period.

'Later this week, we will deploy an update to more quickly provide notifications if the camera goes offline during delivery.'

Let's block ads! (Why?)

Thus Article Amazons Key security flaw lets hackers enter your home

That's an article Amazons Key security flaw lets hackers enter your home This time, hopefully can give benefits to all of you. well, see you in posting other articles.

You are now reading the article Amazons Key security flaw lets hackers enter your home with the link address https://coneknews.blogspot.com/2017/11/amazons-key-security-flaw-lets-hackers_17.html

Tweet

Subscribe to receive free email updates: