- All of the ‘Avengers: Endgame’ Easter eggs discovered by fans Saturday 6:52 PM
- Every big announcement made at D23 about Disney+ Saturday 6:33 PM
- The best haunted house movies to watch online in 2019 Saturday 4:13 PM
- Andy Ngo seen laughing as Patriot Prayer members plan an attack in newly emerged video Saturday 3:59 PM
- How to stream Manchester City vs. Bournemouth Saturday 3:25 PM
- Catholic priest allegedly spent church money on Grindr hookups Saturday 3:04 PM
- Nicolás Maduro’s English Twitter account was suspended with no public explanation Saturday 2:06 PM
- Man claims ex-girlfriend killed his dog after he broke up with her Saturday 1:02 PM
- What are BitTorrent downloads and how do they work? Saturday 12:58 PM
- ICE cuts the cord on real immigrant hotline after being featured in ‘Orange Is the New Black’ (updated) Saturday 10:49 AM
- The 10 best music podcasts for artist interviews and criticism in 2019 Saturday 10:41 AM
- How a socialist Twitch streamer landed in a feud with Dan Crenshaw Saturday 10:07 AM
- How to prepare for your fantasy football draft (and season) Saturday 9:00 AM
- Kit Harington is joining the MCU–and people are guessing which character he will play Saturday 8:48 AM
- How to live stream Juan Francisco Estrada vs. Dewayne Beamon Saturday 8:00 AM
This easy Nest thermostat hack opens your home to attackers
Scary? Yes. Surprising? Not even a little.
Like most things connected to the Internet, the Nest thermostat can and has been hacked. But this one is so simple, it’s frightening.
At the Black Hat security conference in Las Vegas on Thursday, three researchers revealed how easy it is to infiltrate the device, as reported by Tom’s Guide.
Yier Jin, Grant Hernandez, and Daniel Buentello broke down the process of hacking a Nest, which is much easier and scarier than most would expect. “Based on our analysis, we have figured out a hardware backdoor and through this backdoor we can get remote control of the whole device,” Jin said.
Holding down the home button for 10 seconds and plugging in a USB drive is all it took for the researchers to gain full access to the Nest. While the Nest is usually fully secured, the extended press of the home button forces the device into debugging mode, making it available to receive new commands, this time via a USB drive outfitted with custom firmware.
The USB port is only on the Nest in case firmware updates can’t be sent over the Internet. It only takes 15 seconds for someone to gain full control over your Nest.
At this point, you may ask, why does it matter if someone can hack my Nest? What can they really do with it? Much more than you think.
The Nest is essentially a computer. It contains 2GB of storage, proximity sensors, and mesh and Wi-Fi networking. Combined with its advanced software, and Nest can provide invaluable information to nefarious parties about you and your home. It knows when you’re home and when you go to work. What time you wake up and what time you go to sleep. When you go on vacation. How often you walk by the Nest. Your Wi-Fi password (in plain text), and your zip code.
If hacked, all of that information on a Nest could be rerouted to a third-party, without your knowledge. Security has been one of the biggest issues for the upcoming Internet of Things revolution, and this is a prime example of the potential dangers.
So what did the researchers do after they infiltrated the Nest? They turned it into HAL 9000 from “2001: A Space Odyssey.”
“I know that you and Frank were planning to disconnect me, and I am afraid that is something I cannot allow to happen,” the display read.
But most Nest hacks would not likely be so lighthearted.
H/T Tom’s Guide | Photo via Nest
Micah Singleton is a former technology and culture reporter of the Daily Dot and a former staff writer at Gizmodo. His work has also appeared in Time, Yahoo, the Verge, Mashable, ReadWrite, and NBC. Singleton was named a "rising star" by the Huffington Post in 2013.