The The Naughty New Mom Is My First Love Teacher (2025)service model offered by Amazon Key, which gives the company's delivery corps access to customers' homes via smart lock, sounds kind of sketchy under the best circumstances. Amazon, however, assured potential customers there'd be nothing to worry about with Key — the system offers 24/7 monitoring via the Alexa-enabled Cloud Cam to monitor deliveries.
That security safeguard doesn't look quite so foolproof after a group of researchers from Rhino Security Labs discovered multiple techniques to knock out the Cloud Cam and enter a house equipped with a Key system undetected. The group shared its findings with Wiredand in two videos demonstrated the techniques behind the relatively simple hacks, which could allow unscrupulous delivery people to move around Key-enabled homes undetected.
SEE ALSO: Bluetooth exploit may have impacted 20 million Amazon Echo and Google Home devices, says security firmAll it takes to knock out the camera is a computer running the right software within range of the home's Wi-Fi network. The first demonstration shows the "delivery person" unlocking the door using the PIN code, entering the room to deliver a package, and closing the door behind them, just like they should.
Instead of locking the door, however, the thief runs a "deauth" program to temporarily kick the Cloud Cam off the Wi-Fi network. The denial of service (DoS) script keeps the camera from coming back online for as long as the intruder requires, as the program loops the last frame recorded before going offline. Any live viewers or homeowners reviewing the recording are none the wiser.
After moving out of the camera's range and locking the door to avoid suspicion, the thief could move around the home as they liked.
The second attack is less likely to be put into practice IRL, but it's still worth highlighting. The same style of DoS is used to knock out the Cloud Cam, but the delivery person isn't the thief.
Instead, an unassociated hacker waits for the courier to drop off a package, then triggers the attack before the door is re-locked. Unfortunately, the Key Lock's Wi-Fi connection is through the Cloud Cam — so when the Cam is knocked offline, the Lock goes with it. Once the delivery person is out of the picture, the thief could access the house unimpeded.
Both of these scenarios depend on other variables to actually work without tipping off the system — the delivery person has to exit through another door in the first, while the second hinges on perfect timing and sloppy delivery work — but the vulnerabilities are worth highlighting.
Amazon is aware of the Rhino researcher's findings, but downplayed the actual threat they might pose if put into practice. The company pointed out to us in an email that All Key deliveries have time-stamped reports detailing how long doors are opened and the company alerts customers if the camera goes offline for extended periods of time.
Amazon also trusts its delivery people. A company rep told us that Amazon verifies all of its drivers with a "comprehensive background check," and emphasized how each assignment is tied to an individual driver, so any funny business would be immediately detected.
Still, Amazon will issue an update to the Key software to notify users more quickly if the camera goes offline during delivery, and the service won't unlock the door if the Wi-Fi is disabled and the camera is not online.
Topics Amazon Cybersecurity
Previous:The Past is a Foreign Agent
Next:State of the Unions
Best Budget Samsung Monitor Deal: Save 39% On 32How to fundraise for nonprofits and charities on every social media appSpotify Wrapped 2024 reveals its global top author, most popular audiobooksBest Travel Tuesday deals: PostSora reportedly shipping as part of '12 Days of OpenAI' livestream marathonThere's still time to save: Score kitchen deals on Vitamix, Instant Pot & KeurigThe best Cyber Monday Samsung Galaxy deals at Amazon: Phones, watches, earbuds, tabletsWhen does Spotify Wrapped start tracking for 2025?NYT mini crossword answers for December 3How to decolonize your donations and charitable giving2024 Cyber Monday ads: Target, Best Buy, Walmart, Home DepotSpotify Wrapped 2024: The 10 most4 Cyber Monday laptop deals I can't stop thinking aboutManchester City vs. Nottingham Forest 2024 livestream: Watch Premier League for freeBest Budget Samsung Monitor Deal: Save 39% On 32Best MoviePass deal: Get a year of MoviePass for 25% off, or a month for 50% offNYT Connections Sports Edition hints and answers for December 3: Tips to solve Connections #71Best PlayStation VR2 deal: Save $250.99 on the 'Horizon Call of The Mountain' bundleWhat is 'Wordle'? Everything you need to knowHow to watch 'Smile 2' at home: Now streaming Terrorists wanting to hide explosives in an iPad is one reason behind laptop ban It's official: Uber's Travis Kalanick and Emil Michael are actually the worst Orca shows on the rise in China because humans just can't leave whales alone Tom Hardy reads another bedtime story, breaks the internet again MashReads Podcast: 'Fever Dream' is a surrealist 'WTF!?' kind of novel Women stand together in London to honour Westminster attack victims The trailer for Harry Styles' solo debut has everyone freaking out 'The Art of the Deal' gets a new chapter on Twitter after TrumpCare collapses Val Kilmer can't stop tweeting about Cate Blanchett and it's unsettling WhatsApp and encrypted messaging targeted in UK 'Glitter booty' is the latest bizarre beauty trend you've secretly always wanted Zombie Javier Bardem is NOT happy in the new 'Pirates' trailer 13 feminists who play the Twitter game to win Girl uses Tinder to make money and you'll wish you thought of it first PSA: Australia is only dangerous 'if you're a dumbass' 10 things named after Sir David Attenborough 13 things only drunk people can do Craig David's cover of Justin Bieber song is definitely better than the original Facebook Messenger update helps you find your friend's exact location 6 things about adulthood that 'Kenan & Kel' did not adequately prepare me for
1.5821s , 8223.125 kb
Copyright © 2025 Powered by 【The Naughty New Mom Is My First Love Teacher (2025)】,Fresh Information Network