{"id":268481,"date":"2021-06-07T16:03:56","date_gmt":"2021-06-07T13:03:56","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/its-far-too-easy-for-abusers-to-exploit-smart-toys-and-trackers\/"},"modified":"2021-06-07T16:03:56","modified_gmt":"2021-06-07T13:03:56","slug":"its-far-too-easy-for-abusers-to-exploit-smart-toys-and-trackers","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/its-far-too-easy-for-abusers-to-exploit-smart-toys-and-trackers\/","title":{"rendered":"#It’s far too easy for abusers to exploit smart toys and trackers"},"content":{"rendered":"

“#It’s far too easy for abusers to exploit smart toys and trackers<\/strong>”<\/p>\n

\n
\n
\n
\"It's
\n Credit: JpegPhotographer\/Shutterstock
\n <\/figcaption><\/figure>\n<\/div>\n<\/div>\n

The wearable technology<\/a> market is booming, with half a billion wearables<\/a> sold globally in 2020. App<\/a>s on these devices, or the devices themselves, often claim to monitor our health to spot illnesses, track our workouts to help us reach our fitness goals, or keep an eye on our children’s whereabouts to enhance their safety.<\/p>\n

But they’re also divisive. Supporters of wearable technology claim that health trackers should be prescribed by the NHS and could even deliver an early warning of a possible COVID-19 infection. GPS tracking devices designed to be worn by children, meanwhile, are seen as a safety asset<\/a> for parents. <\/p>\n

Yet studies have found fitness trackers to be too inaccurate and misleading to be used by medical professionals<\/a>, and that, because they’ve been rushed to market, wearables of all kinds are an insecure “Wild West” region of technology that requires urgent regulation.<\/p>\n

In a recent report<\/a>, we looked at the security risks associated with wearable devices, as well as “smart toys” that can record children in their homes. We found a concerning lack of security\u2014especially for devices aimed at children\u2014which lack even the most basic cybersecurity precautions, leaving them open to abuse.<\/p>\n

Fitness trackers and personal data<\/b><\/p>\n

One key issue with wearables is the data they generate and share. For instance, many fitness trackers rely on data on a person’s location to map their workouts. That’s great if you’re keen to track the distance of your jogs, but it’s not especially sensible if you’re embarking on those jogs from a military base<\/a> in hostile territory.<\/p>\n

\n

Strava released their global heatmap. 13 trillion GPS points from their users (turning off data sharing is an option). https:\/\/t.co\/hA6jcxfBQI<\/a> \u2026 It looks very pretty, but not amazing for Op-Sec. US Bases are clearly identifiable and mappable pic.twitter.com\/rBgGnOzasq<\/a><\/p>\n

\u2014 Nathan Ruser (@Nrg8000) January 27, 2018<\/a><\/p><\/blockquote>\n

<\/p>\n

Beyond that specific example, which caused some embarrassment for the US military in 2018, it’s clear that sharing your location publicly, even in a safe civilian setting, comes with significant risks. <\/p>\n

And it’s not just the real-time tracking of your running route that could expose your whereabouts. Because these trackers upload your workouts to an app and share them publicly, it’s possible for predators to use historic running, biking or hiking routes to predict where you might be at a given time. This safety issue isn’t only restricted to workouts. Even something as innocuous as sharing a photo through your Apple watch<\/a> can give away your geolocation. <\/p>\n

Are trackers safe for children?<\/b><\/p>\n

Even more concerning are devices designed to be worn by children, sales of which are expected to reach $875 million (\u00a3620 million)<\/a> by 2025. These watches are marketed as wearable tech to keep kids safe, tracking their location and alerting parents when the watch’s onboard “SOS” button is pressed\u2014or if the child travel<\/a>s beyond a geofenced area. <\/p>\n

Smart watches as safety devices on children’s wrists may sound like a boon for anxious parents<\/a>, but a 2017 survey<\/a> of children’s smart watches found that the all-important “SOS” button either got stuck or didn’t work at all in most cases.<\/p>\n

Additionally, flaws in some smart watches’ accompanying apps have raised serious safety concerns<\/a>. Security researchers<\/a> have found they could not only easily access children’s historical route data\u2014like their path to and from school\u2014and monitor their geolocation in real time, but they could also speak directly to the child, through the watch, without the call being reported in the parent’s app.<\/p>\n

Connected toys<\/b><\/p>\n

Fears that internet of things devices can give people unauthorized access to children also extend to the “smart toy” market. Some of these toys contain hidden cameras and microphones which, if hacked, could be used to record the interior of your home, including children’s rooms.<\/p>\n

In 2017, German regulators recognized this danger by banning the sale<\/a> of the Cayla “smart doll,” labeling it as the kind of “de facto espionage device” that Germany’s Telecommunications Act<\/a> legislates against. In an unusual and unsettling move, the regulator went further by asking parents who’d bought one to destroy the doll<\/a> to prevent illicit surveillance.<\/p>\n

\n

Goodbye Spy #Toy<\/a>: #Germany<\/a> Bans My Friend #Cayla<\/a> Doll | https:\/\/t.co\/RcIiVGTPWy<\/a> #IoT<\/a> #Security<\/a> #Privacy<\/a> #Surveillance<\/a> pic.twitter.com\/P6gkrDqzkU<\/a><\/p>\n

\u2014 HackRead.com (@HackRead) February 18, 2017<\/a><\/p><\/blockquote>\n

Even if the manufacturers of smart toys and children’s smart watches can guarantee far better security than that which led to the Cayla ban, there remain other surveillance concerns. In 2019, a UNICEF-led report<\/a> highlighted how children’s rights\u2014to creativity, freedom of choice and self-determination\u2014are challenged by smart devices. Present in schools, at home, and on the wrist, this kind of round-the-clock surveillance, the report argues, restricts carefree childhood and hurts kids’ development.<\/p>\n

Making trackers safer<\/b><\/p>\n

Trackers and toys can be made safer. Before we allow these devices to flood the market, it’s essential we standardize<\/a> the minimum security requirements that manufacturers must comply with\u2014no matter where in the world these devices are made. <\/p>\n

Key among these standards should be the removal of factory-default passwords<\/a> on devices\u2014which, like “admin” or “1234,” are easily guessed or discovered by even the most novice hacker. Manufacturers should also publish a vulnerability disclosure<\/a> to help users understand risks, and make regular software updates in response to vulnerabilities unearthed by security researchers.<\/p>\n

Clearly, monitoring people’s health via wearable trackers has the potential to radically improve access to medical care. Likewise, every parent wants their child to be safe, and smart devices, like mobile phones before them, could be a reliable tool for checking in with them. But without safety standards, these devices have the potential to cause more harm than they offset. Regulators must act fast to stop this growing market from leading to significant harms.\n <\/p>\n\n

\n

Is that new doll spying on your kids?<\/a>\n <\/div>\n

\n
\n Provided by
\n The Conversation
\n
\n <\/svg><\/a><\/p><\/div>\n

\n This article is republished from The Conversation<\/a> under a Creative Commons license. Read the original article<\/a>.\"The<\/p>\n

<\/p>\n

\n

Citation<\/strong>:
\n It’s far too easy for abusers to exploit smart toys and trackers (2021, June 7)
\n retrieved 7 June 2021
\n from https:\/\/techxplore.com\/news<\/a>\/2021-06-easy-abusers-exploit-smart-toys.html<\/p>\n

This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no
\n part may be reproduced without the written permission. The content is provided for information purposes only.<\/p><\/div>\n<\/p><\/div>\n