Your Smart Home Is Stupid – IoT Security Explained
Save 10% on XSplit’s video tools at https://lmg.gg/xsplit
IoT devices might be putting you at risk due to security holes…
Leave a reply with your requests for future episodes, or tweet them here: https://twitter.com/jmart604
► GET MERCH: https://lttstore.com
► AFFILIATES, SPONSORS & REFERRALS: https://lmg.gg/tqsponsors
► PODCAST GEAR: https://lmg.gg/podcastgear
► SUPPORT US ON FLOATPLANE: https://www.floatplane.com/
FOLLOW US ELSEWHERE
—————————————————
Twitter: https://twitter.com/linustech
Facebook: http://www.facebook.com/LinusTech
Instagram: https://www.instagram.com/linustech
TikTok: https://www.tiktok.com/@linustech
Twitch: https://www.twitch.tv/linustech
The 2.4 vs 5 GHz split advice is not just worthless, but actually detrimental advice. If it’s the same IP address space, you could even bounce your IoT through Starlink and still obtain zero security benefit. What’s wrong with you guys?
I feel he should be called Henry, get it, WiFi enabled Egg Carton, HENry 🐔 come on, that’s funny 😂😂😂
i’ll go analog. i also disliked the mickey smart home… remember that episode?! I didn’t….
That’s why the only smart applience in my house isn’t connected to anything.
IT’S A KETTLE, IT DOESN’T NEED TO BE REMOVE CONTROLLED!
(I only bought it cos it looks good and allows me to control the temperature more granually)
We all understand the lack of security in these devices. We also recognize the steps that can be taken to help mitigate the risks of this. However, I’d love to see more companies push for an in house primary setup for the connected devices with little to no outside reach. We see this in some scenarios, i believe I watched a video regarding an in house server with Zigsbee connection but still the hardware has to be compliant and hopefully not reach past the home server.
Don’t you need an open port to one of the IoT devices to hack the things from outside the network? Just forego the over-internet control and you should be alright.
EU WAREHOUSE WHEN?!!?
I guess I won’t be buying that "smart" juicer!
Soo.. i shouldn’t have any of these smart home devices.. right? Is that the gist of this video?
The scary thing about smart home js any hacker can breach your house and everything.
It’s a joke. All the life depends on the no compassionate utensils and is decided by big tech and its bad engineers.
Love this, I would honestly like more videos about setting up your smart home securely.
nice
I wrote a paper on cybersecurity in iot in college, its pretty abysmal.
It’s stupid and a security nightmare. Can you imagine what government sponsored hackers can do to your home if you’re targeted like I am? Already they can mess with your water, toilet, stove, fridge and outlets. I know, I went through it all. In fact, I’m still going through it. All this without being connected to the internet. Imagine what they can do if I used smart appliances. No thanks.
Why are you posting my password?!..
A great feature of modern routers is guest network. You can set one for your security IoT devices like cameras and locks and another one for normal IoT devices like TVs and lights. And still use both main separated dual band networks for the more important devices like PCs and phones. Not perfect solution as already pointed out but it helps.
no machine is smarter than humans. Imagine hackers take advantage of your things to do bad things. Be careful with the socalled ‘ smart ‘
"now I’m not saying your smart fridge is pointless, well it is, but-", ha! made me chuckle. instant like
If you are considering using the unhackable password in this video, please, please don’t. I know you’re out there, thinking it’s a good idea. It’s not.
Seriously? The age of the hardware is not relevant when the primary issue is the software stack. It’s pure laziness and stupidity from the manufacturers – and lets not even get started on moronic "cloud-account-connection". There are different protocols – they are "agreed upon standards of sorts – where the security maturity is better on z-wave (plus) and zigbee protocols, and stupidity often higher on wifi-enabled crap. One valid point however points to an earlier video from you guys – firmware management… It’s pure stupidity here. Take the "hub" scenario- and your own "hub" setup. In short, it should always be possible when "ownership" is established to update and _always_ do things locally instead of always be "cloud-enabled". And no – most do not do their best in my opinion – you are bundling them together in a bad manner here. Most do crap. Sadly.
Yeah. The tablet I am using right now could be hacked. Sigh.
You can definitely use an Intel cpu as a toaster, just look at the i9
Just use the guest network for iot.
This would make a good in depth LTT video!
Why are you posting my password?!..
Some vice once said: If it’s smart, it’s vulnerable. (and wrote a book about it)
I bought a LED light that was controllable via your phone (which already annoys me, give me a useful remote rather than having me waste time logging into my phone and looking for an app every time). At least in theory. The app required me to make an online account, give my wifi network password, give precise location permissions, give camera permission, oh and demanded I reconfigure my network settings, and I packed the crap back up and sent it back to the shop because no way in hell am I going to let a damn lamp demand that kind of crap. Why the hell does a app that controls a lamp need to know my location? What the f*** could it possibly want to take pictures for? Are these people insane? And that was even before I even looked into any automation.
Best way
Cut out the router into several different pieces and obliterate Ethernet port with ethernet cable
If your willing to use an electrician that knows cbus they can fix what you tried to do
Simple.. Just use powerline connection. No wireless needed for IoT.
The rest of the gadgets are modern enough to atleast not tear like tracing paper.
My IoT is set up on a DMZ. Which is how I would reccomend using them.
I’ve worked in IT for over 20 years. My home is quite "dumb" overall… on purpose. Simplicity can lead to reliability. I’m not lazy enough to need a text message from my washing machine. The best part about my home is that I rarely have to troubleshoot things. There’s pretty low complexity.
Just buy all your IoT devices from Temu. You’ll be right as rain.
Why are Os on IoT Not based on the most secure Open Source Os. (OpenBSD for example)
In my opinion "dumb" houses are more secure than "smurt" houses
Jokes on you, my IoT network is based on open source software and housed on a separate VLAN!
The less internet connected devices the better really… Just a damn shame everything goes over the internet these days 😶
Just use home assistant and keep that shit local. Also isolated VLANs
Great Video, very informative. Are you aware of any devices or software capable of detecting and securing IoT devices in a home ?
This is why I have ACLs that limit where my (few) IoT devices can communicate.
I know your password to your back door…. it’s Pineapple Juice
Also go local with home assistant
Well, I guess I can’t use password uNh4Cka8L3-6969 anymore.
I would so buy a gaming toaster just for the memes
Intel chips in toasterS😂👍👍
internet of shit
@Techquickie –
Your Smart Home Is a SPY BUG with backdoors even the KGB never dared to dream about
Umm, putting IoT devices on 2.4 and others on 5GHz doesn’t really do anything. MOST wireless APs will allow traffic between the two radios, everything is on the same subnet.
What you need is the WIFI network be ISOLATED from the LAN. The most consumer friendly way is through the use of a ‘guest’ network. Many APs offer a ‘guest’ network that is treated internally by the AP as a VLAN, with the only traffic enabled for guest clients is to the gateway on your network (your cable/dsl modem+router combo unit).
This technique works well, and is SUPER easy to set up, so it’s what I recommend. If you want more control, and are willing to put in the time, consider ‘smart’ switches that offer VLAN capabilities. They are only a little more expensive than unmanaged switched, but allow you to play with VLANs in much more complicated way, partitioning your network as you see fit (for example, streaming sticks on one VLAN, cameras on another, smarthome stuff on another).
if your smart home cant run crysis or doom, its not smart enough