TOTW #2: IoT, Data and Privacy Breaches

This is a good decision!
More community members will be able to participate. Perhaps before this not everyone had the opportunity.

2 Likes

An interesting topic indeed! :hot_face:

Every identified person is under constant attack by the government entities who shamelessly hacks into our homes uninvited and unconcerned with our response, using IoT to unlock unencrypted doors and prey upon our private-matters as if they gave us lives. :cowboy_hat_face: :face_with_monocle: :space_invader:

Similar hacker attacks are happening every few seconds somewhere around the world, just last week one of the largest data centers in the United States, “CyrusOne” was exposed to an attack by a variant of the REvil (Sodinokibi) ransomware, which previously hit a number of service providers including the “all eyes” governments offices. :see_no_evil:

The data risk is very real with IoT and it’s growing rapidly with 100 + billion connected devices. I believe the risk can be mitigated with IoTeX’s decentralized trusted IoT and trusted computing. Just like @Alina pointed out, I think it’s about time we as the concerned people start taking this matter a little more serious. Back in 2018, a well-known blockchain evangelist and not so close friend of mine Ian Balina were hacked $2 million by storing his private and public crypto keys on cloud storage app Evernote.

Every time we use any of these single point of failure devices we unlock our doors to those entities, :sleeping: I dream of the day when people start boycotting any system or devices that solely relies on the traditional centralized data centers, it’s time to get a real lock by switching to the likes of made by IoTeX devices.

However you choose to stand up for this, IoTeX is positioning to play a bigger role on the global stage in the fight for our privacy and security.

TG: @c_okenwa

3 Likes

In November 2018, Marriott International announced that cyber thieves had stolen data on approximately 500 million customers. :upside_down_face: The breach actually occurred on systems supporting Starwood hotel brands starting in 2014. The attackers remained in the system after Marriott acquired Starwood in 2016 and were not discovered until September 2018. :mask:

For some of the victims, only name and contact information were compromised. The attackers were able to take some combination of contact info, passport number, Starwood Preferred Guest numbers, travel information, and other personal information. :bomb: Marriott believes that credit card numbers and expiration dates of more than 100 million customers were stolen, although the company is uncertain whether the attackers were able to decrypt the credit card numbers.
The catastrophic big data loss could have avoid if securities measure provided by Iotex have been in place.
Some of these measure:
:ballot_box_with_check: All sensitive data could have secured by uses of private hardware such as Avoboard.
:ballot_box_with_check: The data could have been stored so as to be able to re-access back on secure servers such as Iotex DID.
Telegram Id: @tadex01

2 Likes

Why Ring Doorbells Perfectly Exemplify the IoT Security Crisis

A new wave of reports about the home surveillance cameras getting hijacked by creeps is painfully familiar.

1 Like

Well, while we still are discussing the problems with privacy of different devices, I think we can talk about not so huge cases also. Sorry, this story will be sad. Argentinian footballer Emiliano Sala died in a plane crash in the beginning of this year. This was a big shock for his family. An additional terrible shock for them was that the surveillance footage from the morgue was stolen and made public. These are not only safety issues, they are also additional suffering for people in such cases.

It is very important that our security has not to be in conflict with our privacy. Cryptographic protection of information could help people to leave private what is private. IoTeX’s Ucam should help people not to get in a similar situation.


*Telegram… @bez_nicka*
2 Likes

Hi everyone!

Thank you for participating in this discussion! :innocent: We will shortly pick the winners together with our Ambassadors & announce them! In the meantime, please join a new discussion thread that started today :arrow_right: join now

1 Like

Underwriters Laboratories, the developer of security standards for industry and electronics, offers a new principle for standardizing the security of Internet of Things devices in several categories at once. The company recognizes that most of the products currently on the market will not pass this certification.

Underwriters Laboratories (UL), a safety standardization and certification company, has introduced its standard for IoT devices.
With permanent offices in 46 countries and serving more than a hundred, UL is one of the most respected structures in its field. She has developed security standards for many different industries, including ecology, construction, industrial equipment, electrical and electronic products, etc.

It is proposed to certify devices in seven categories: software component updates, data and cryptography, logical security, system management, user personal data, security protocols and process, documentation.
Each of these factors corresponds to a set of practical recommendations for ensuring security.

For example, the minimum requirement in the “data and cryptography” category is the absence of a default password. To obtain the maximum certificate, Diamond in the same category must stand up against brute force.

Telegram @ms1may

I have to add a very recent one - Wyze camera user data breach. 12/28/2019.
The data breach includes customer emails, camera nicknames, WiFi SSIDs, Wyze device information, body metrics for a small number of product beta testers, and limited tokens associated with Alexa integrations.

Check it out! We need to a new system to protect our data!

7 Likes