【hum 390 - images of eroticism】

Smart home systems are hum 390 - images of eroticismsupposed to make our lives easier and safer -- but some of the most popular connected security cameras could make your place an easy target if your neighborhood is visited by a tech-savvy burgling crew.

Security researcher Jason Doyle recently published a set of three vulnerabilities he found in Google's Nest cameras. The flaws, which take advantage of the camera system's always-on Bluetooth, allow anyone within the devices' Bluetooth Low Energy (BLE) range to overwhelm them and shut them down.

Doyle claims he reported the flaws to Google back in October when he first found them, but the company has yet to offer any updates to fix the issues. He decided to go public with the information last week to inform Nest users of their potential vulnerability.

SEE ALSO: Ultimate Zelda superfan rigs smart home to respond to ocarina

Models affected by the vulnerabilities include the Dropcam, Dropcam Pro, Nest Cam Outdoor and Nest Cam Indoor running version 5.2.1 of Nest's firmware.

The first two flaws can be exploited by sending the camera overlong Wi-Fi SSID parameters or a encrypted password parameters. This triggers a buffer overflow condition, which causes the cameras to stop recording, crash and reboot.

Mashable Light Speed Want more out-of-this world tech, space and science stories? Sign up for Mashable's weekly Light Speed newsletter. By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy. Thanks for signing up!

The third flaw is a bit different: it knocks the camera from its connected Wi-Fi network entirely. Attackers can bombard the camera with a new SSID connect to, which knocks it off its network as it attempts to join the new one. The process takes about 90 seconds before the original Wi-Fi connection resets -- but if the attack is repeated on a loop, the security system is rendered useless.

Original image has been replaced. Credit: Mashable

Doyle told us these flaws aren't all that rare in the smart products that are coming to our homes as the Internet of Things (IoT) grows and evolves. "I've recently been interested in how IoT products were implementing the newer Bluetooth LE specification," he said via email. "I tested several home automation products, from cloud cameras like Google's Nest Cam to Bluetooth-enabled pressure cookers; and my results were a bit disconcerting."

He said some connected home products that use Bluetooth don't have much to offer in the security department at all -- but the Nest isn't the worst of them. "The Nest cam does have some well-thought-out security measures in place but their implementation obviously had a few shortcomings," he said. 

Doyle also stressed that leaving Bluetooth on isn't the issue at hand here -- but it's important that makers of these connected devices lock those systems down.

"While leaving it on has functional advantages it also increases the attack surface and presents more options to an attacker," he said. "If they need it for some other integrations then it makes sense as long as they do their due diligence in securing the implementation."

A Nest rep acknowledged the existence of the flaws to us via email, but assured us a patch is on the way. "Nest is aware of this issue, developed a fix for it, and will roll it out to customers in the coming days," they said.

Until then, Nest owners would be smart to depend on the sturdiest old-school security systems their homes have to offer: a strong set of locks.

---

Featured Video For You

---

This smart lamp will turn any surface into an interactive display

---

Topics Cybersecurity Google Cameras

• Shopping
• Social Good
• Science
• Tech
• Deals
• Games
• Digital Culture
• Life

• Weather app glitch makes it look like hell is basically freezing over
• Tiny human snake catcher has a glorious and terrifying career ahead of him
• Construction worker with the voice of an angel does a mean Pavarotti
• The hat for Elon Musk's 'Boring Company' is predictably boring
• Productivity Boost: Enable 'Night Mode' on All Your Devices
• Did this 'Game of Thrones' star just reveal when Season 7 will premiere?
• Tiny human snake catcher has a glorious and terrifying career ahead of him
• What happens when the LGBTQ community celebrates? A 24
• No Time for a Negative Peace
• Forget Facebook and Google: The ad world thinks this tech giant is 'terrifying'

• 2020 Golden Globe nominations: Streaming services dominate in a big way
• Meet Friar Pup, the cutest new member of The Franciscan Monastery
• Google Maps brings 'Incognito' privacy mode to the iPhone
• Pantone's 2020 Color of the Year carries more than one message
• Sprint contractor leaks 261,000 phone bills and bank statements
• Snapchat Cameo is like a less scary deepfake for your Snaps
• BBC's shortwave transmissions from Thailand go dark, after talks fail
• Elon Musk wins in 'pedo guy' trial
• 'Marriage Story' memes are helping the internet cope with their broken hearts
• How the horror

• Best speaker deal: Save $30 on the JBL Clip 5
• Everyone needs to hear Justin Timberlake's inclusive iHeartRadio Music Awards speech
• 'Counter
• This Chrome extension lets you blow off coworkers with class
• Researchers map the koala genome in the name of saving the species
• Yeah, Twitter's watching you even when you're not tweeting
• Pizza dipped in milk is the most disrespectful pizza crime yet
• There's a secret message in Nintendo's Switch Pro controller. Here's how to find it.
• EPA's leader is open to reconsidering crucial climate assessment
• Someone like boo: Adele confirms she's put a ring on it while discussing #feels

• Impact of Temperature on Intel CPU Performance
• The tool that forces you to take a quiz before commenting is now available to everyone
• Strongest storm in years, Cyclone Enawo, strikes Madagascar
• What happens when the LGBTQ community celebrates? A 24
• Better Buy: Previous
• Sleep in a spherical capsule hotel that floats over to a desert island by morning
• Here's who we think will fly to the moon with SpaceX
• J.K. Rowling trolls Donald Trump with the most British reference ever
• U.N. aims to make carbon emissions cost money at COP 25 climate talks
• Sorry Arian Foster, but you probably couldn't take down a wolf (we checked)