This week in cybersecurity with the Code Curmudgeon March 6, 2020
Five interesting things that happened in cybersecurity this week:
Millions of web sites will be labeled as insecure
Another baby monitor gets hacked
USB charger might be hacking you
Car remotes aren’t keeping your car safe
People keep using the same bad passwords
Shortcuts:
Let’s Encrypt certificates 00:37 • This week in cybersecurity with the Code C...
Baby monitor 03:22 • This week in cybersecurity with the Code C...
USB charging 04:43 • This week in cybersecurity with the Code C...
Car remotes 06:25 • This week in cybersecurity with the Code C...
Bad passwords 08:54 • This week in cybersecurity with the Code C...
Links:
“Let’s Encrypt” certificate authority vulnerability
Millions of web sites will be labeled as insecure because they people who issued their security certificate had a software bug.
https://www.schneier.com/blog/archive...
https://thehackernews.com/2020/03/let...
Besides using the tool https://checkhost.unboundtest.com/ to check if a certificate needs replacement, Let's Encrypt has put together a downloadable list of affected serial numbers, allowing subscribers to check if their websites rely on an affected certificate
baby monitor hacked again
This is a warning about smart cameras and baby monitors. Basically, the password is a weak point, either because you’ve left the default password in place like 0000, or because you’ve chosen a crummy easy password.
https://www-bbc-co-uk.cdn.ampproject....
USB Charging – Juice jacking
As I’ve pointed out before, the USB port on your device can be a gateway to mischief. Basically, USB devices, even chargers and flash drivers, have small micro-controllers in them. So you can create one and have it do whatever you want.
https://securityboulevard.com/2020/02...
Universal car remote hack
A hacker has created something he calls a “keyless repeater” which he sells and claims can unlock any luxury car that uses wireless key fob
Article https://www.newsgram.com/hacker-evanc...
Demo video: • Video
Mr Mercedes book by Stephen King https://amzn.to/2VTwUH4
Top 5 passwords hackers guess
Details: admin, 12345, default, password, root
https://dazeinfo.com/2020/03/05/these...
twitter post about passwords: https://twitter.com/CodeCurmudgeon/st...
Previous episode with FBI password advice: • This week in cybersecurity with the Code C...
See also
SQLi Hall-of-shame http://sqlihallofshame.com for SQL Injection
IoT Hall-of-shame http://iothallofshame.com
IoT Hall-of-shame Reddit / iothallofshame
My blog: http://codecurmudgeon.com
Twitter: @Codecurmudgeon / codecurmudgeon
Facebook: / codecurmudgeon
My photography channel: / @backsideofblue3163