Security of Joule

Read the news about IoT devices being hacked and used as botnet to ddos selected websites. Is Joule similarly susceptible to being hacked and used as botnet?

My understanding of how this hack is accomplished is quite limited.

Find more posts tagged with

How To Joule

Comments

szeder_185682

Sure it is. Everything is, unfortunately.

JasonWirth_68226

Not really. It's only plunged in for a couple hours at a time, unlike a device that at always on like a networked home security camera.

Darren_316779

Is there ability to change the default password of Joule to prevent unauthorized access? By the way, I intend to leave Joule plugged in the power supply at all time. This likely means it is always connected and listening for a signal to start?

wolfiegirl

OH no!! You mean my Joule ("Bob") could get up out of the water, sneak up on me and pounce??!!!?

Erik_Ogilvie_33707

It's not like it would necessarily break it... it would just destroy the internet without you noticing. As long as my steak comes out fine.

Glynn_162348

Joule would lack the processing ability to become part of a Botnet. If it was somehow hacked the worst you could expect is some hacker could turn it off or change your water temperature. I'd not have any concern of that happening at all.

I have no direct knowledge of Joule security features but my assumption is that since the pairing to the smartphone is via bluetooth, that there is some built in security that only allows control via the paired device.

Grant probably has a backdoor built in so he can ruin your dinner if you are mean to him ;-)

Brandon_Byrd_40557

Devices don't need large amounts of processing power to be used for nefarious purpose. Botnets have exploited vulnerabilities in printers, routers, CCTV cameras, and even refrigerators.

pgcath

When we came out for the event in Seattle, @Chris_Young_80640 discussed this in the roundtable.

We didn't have time to get into a ton of specifics, but he mentioned that the Valve folks had already done several security audits during the build out and the beta. That is head and shoulders above most IoT implementations that really don't consider security at all - and I mean that literally: most of these products go from design to ship without ever passing a single security audit, much less multiple security audits by folks that know what they are doing...

FWIW, there are some pretty nefarious failure modes that they are already addressing, like (to @Glynn_162348 's point) changing the temperature. This seems pretty innocent until you think about it deeply... A dedicated attacker could, - if they had not already closed off this avenue - take control of your Joule during any cook of sufficient duration, and structure a cook profile purpose built to turbocharge bacteria growth while reporting to the end user that everything was great, their food was safe and ready.... That's bad.

But again, they've wargamed that already, and mitigated that risk. I can't emphasize how much that just *isn't* being done at most companies.

HammeredChef_DEFINITELY_does_NOT_work_at_22134

Holy Shit! Im locking mine in a drawer at night ....

wolfiegirl

invictusman_1237564

Injustice at every turn. How does one become the kind of person who will protect people?

LangdonJohn_1301879

The Security Industry Authority (SIA) is a recognized security training system and is important to the global security industry. SIA is a structured training and education program, and upon completion the qualification is recognized worldwide and by customer organizations (UN, Red Cross, leading oil companies, diplomatic missions, etc.). If you want to work in this field, I do not recommend it. See here how it happens. The guys are cool, but it's hard for them. The program https://www.ccsecurityservices.co.uk/ is not easy.

Brytongi_1335248

Well, I think that nowadays everything can be hacked. When I was installing wireless security cameras in my home, I often searched for a well-secured camera. I have read about numerous cases of people's video cameras being hacked, and they could see what is happening in the house or what people are doing at home. It is dangerous because hackers can record you naked or, even worse, track you when you are not at home and rob you. It is why we should put strong passwords on your WI-FI networks and not only.