Household INFOSEC in a Post-Sony Era #bbuzz
summary
Home security hardens around DD‑WRT router and subnet isolation but still fails: an LG smart TV leaks channel viewing, phones and apps (British Airways, EasyJet) request excessive permissions, fitness trackers and a bike sensor upload GPS/heartbeat leaks, and a three‑year‑old car ships with Flash in its infotainment. Build tooling and supply‑chain risks show up as Java deserialization + Groovy in Spark and naive Maven/Docker pulls. Practical advice: assume external data is malicious, compartmentalize builds, verify signatures — consumers alone cannot fully fix this.
AI-written summary · about
chapters (18)
- 0:00Introduction
- 1:22What am I trying to do
- 2:20Security vs Privacy
- 3:15Windows XP
- 5:06Chrome
- 8:56Consumer devices
- 10:06Android
- 10:58Google Photos
- 12:12Fitbit
- 13:34Car History
- 14:46Privacy
- 15:56We lost control
- 17:20We need to fix this
- 18:15External data is malicious
- 19:00DNS lookups
- 20:14Java serialization
- 22:56Trust me
- 27:09Questions
related talks
48mSecuring The Internet Of Things
44mNight of the living vulnerabilities
43m50 Shades of AppSec
01h 00mHack to the Future
31mEcosystem, Interoperability and Standards: IoT Security
32mUncovering the risk of things
35mPatterns and Anti-Patterns in Embedded Development: What Security Incidents...
22mDo your gadgets have ears? Why IoT regulation must include data privacy