Key Takeaways
- Hnub Monday, Tsib Hlis 17 thaum 4:50 AM EDT, kab laum nthuav tawm Eufy lub koob yees duab kev ruaj ntseg pub.
- Lub tsev ntse thiab Internet ntawm Yam khoom siv tsis muaj qhov tseem ceeb ntawm kev ruaj ntseg.
- Txoj cai lij choj tuaj yeem yuam cov neeg muag khoom kom coj lawv cov neeg siv kev nyab xeeb tiag tiag.
Cov tswv ntawm Eufy ntse lub koob yees duab kev ruaj ntseg tau sawv rau Hollywood-style npau suav phem ua ntej lub lim tiam no thaum muaj kev ua txhaum cai nthuav tawm lawv lub koob yees duab hauv tsev rau txhua tus hauv Is Taws Nem. Peb yuav tiv thaiv zoo li cas?
A software hloov tshiab ua rau muaj kev ua txhaum cai, thiab nws tau kho tom qab ib teev. Tab sis lub sijhawm ntawd, ib tug puv tes ntawm Eufy cov neeg siv pom tias lawv tau nkag mus rau lwm tus neeg siv lub koob yees duab nyob, nrog rau cov yeeb yaj kiab kaw. Qhov kev ua txhaum cai kuj tau tso cai nkag mus rau tag nrho tus as-qhauj, txhais tau hais tias leej twg tuaj yeem yias thiab qaij cov neeg tsis paub lub koob yees duab kom pom zoo nyob ib puag ncig lawv lub tsev. Qhov no qhia txog cov teeb meem muaj nyob hauv txhua lub tsev ntse gadgets.
"Raws li peb nqa cov thev naus laus zis ntau ntxiv rau hauv tsev, cov neeg ua phem hauv cyber yuav tig lawv lub siab rau cov txheej txheem tshiab no," Ben Dynkin, tus tsim thiab CEO ntawm Atlas Cybersecurity, hais rau Lifewire ntawm email. "Qhov kev tshuaj xyuas ntau ntxiv los ntawm cov neeg ua phem ua phem yuav ua rau muaj kev tawm tsam ntau ntxiv, thiab tsis muaj kev cai lij choj lossis kev tswj hwm yuav tuaj yeem ua rau muaj kev cuam tshuam nws. Txhawm rau daws qhov teeb meem ntawd, peb yuav tsum nrhiav txoj hauv kev tshiab thiab tshiab rau ob qho tib si ruaj ntseg thiab tiv thaiv kev ua txhaum cai."
Insecure By Design
Nyob rau hauv nqe lus muab rau Lifewire los ntawm Eufy-maker Anker, qhov hloov tshiab software ua rau muaj kab mob, uas cuam tshuam rau 712 cov neeg siv thiab tau kho nyob rau hauv tsawg dua ob teev.
Cov teeb meem hauv qab tseem nyob, txawm li cas los xij. Cov khoom siv Internet-of-Things, raws li cov khoom siv hauv tsev ntse no tau muab cais tawm, tsis yog tsim los kom muaj kev nyab xeeb.
"Tam sim no, IoT cov cuab yeej feem ntau tsis tsim nrog kev ruaj ntseg pem hauv ntej ntawm lub siab," Dan Tyrrell ntawm lub tuam txhab tshuaj ntsuam kev nkag mus rau Cob alt.io hais rau Lifewire ntawm email. Qhov teeb meem yog cov tsim qauv thiab cov neeg muag khoom txaus siab rau cov yam ntxwv dua li kev ruaj ntseg.
"Lub lag luam IoT yog niaj hnub tsim kho tshiab nrog cov tuam txhab tshiab thiab tsim kom muaj cov khoom lag luam thiab cov kev daws teeb meem rau kev ua lag luam ntawm lub caj dab tawg," hais Dynkin. "Qhov no txhais tau hais tias rau cov tuam txhab kom ua tiav hauv qhov chaw, lawv yuav tsum tsim kho sai sai thiab sim tawm tsam lawv cov neeg sib tw, uas txhais tau tias, kev ruaj ntseg yuav raug kho raws li qhov kev txiav txim siab thib ob, tsis yog lub ntsiab lus tseem ceeb ntawm cov khoom. rau ubiquitous vulnerabilities uas yuav raug exploited."
Ntxim qab kawg, cov neeg uas txuas nrog lawv lub koob yees duab Eufy tsuas yog siv Apple's HomeKit Secure Video tsis cuam tshuam los ntawm qhov kev ua txhaum cai no, uas qhia tau tias muaj kev nyab xeeb thawj zaug tuaj yeem ua tau.
Regulation
Cov kev ua txhaum cai no yuav tsis tso tseg kom txog thaum kev ruaj ntseg dhau los ua qhov tseem ceeb raws li cov yam ntxwv, thiab qhov ntawd yuav tsis tshwm sim kom txog thaum qee tus neeg yuam cov neeg muag khoom hauv tsev ntse kom ua tiav. Ib lo lus teb yog tsoomfwv txoj cai, zoo li peb muaj rau khaws peb cov zaub mov kom nyab xeeb, thiab EU xov tooj ntawm tes roaming pheej yig. Txoj cai yuav yuam cov qauv yam tsawg kawg nkaus rau cov neeg muag khoom, thiab rau txim rau lawv ua txhaum cai.
"Txoj cai tsis tas yuav yog cov mos txwv nyiaj hauv kev ua kom cov khoom siv IoT muaj kev nyab xeeb," Tyrrell hais. "Xwb, peb yuav tsum saib cov kev cai raws li ib kauj ruam ntawm txoj kev yog. Kuv yuav ceeb toom tias kev ua raws li tus qauv kev cai tsis zoo ib yam li kev ruaj ntseg, tab sis nws zoo dua tsis muaj dab tsi."
Yuav daws qhov teeb meem ntawd, peb yuav tsum nrhiav txoj hauv kev tshiab thiab tshiab rau ob qho tib si ruaj ntseg thiab tiv thaiv kev ua txhaum cai.
Lwm tus tawm tsam kev cai nkaus. Paul Engel, tus tsim ntawm Txoj Kev Kawm Txoj Cai Lij Choj, suav nrog tus cwj pwm no.
"Qhov kawg peb xav tau yog tsoomfwv cuam tshuam ntau dua," Engel hais rau Lifewire ntawm email. "Ib ob peb qhov kev foob pheej yig thiab them nyiaj pov hwm yuav ua ntau dua los thawb cov tuam txhab no kom lawv txoj kev ruaj ntseg zoo dua li txoj cai lij choj tuaj yeem ua tau."
Thaum kawg, kev tiv thaiv cov neeg siv khoom feem ntau yog los ntawm tsoomfwv txoj cai. Thiab muab cov xwm txheej keeb kwm yav dhau los, nws zoo li European Union tau txav mus ua ntej ntawm qhov no, tab sis Asmeskas twb muaj qee txoj cai los tsim kho.
"Peb tuaj yeem txuas ntxiv cov qauv uas tau teev tseg hauv 2020 Internet of Things Cybersecurity Improvement Act-uas tam sim no tsuas yog suav nrog cov khoom siv los ntawm tsoomfwv cov koomhaum-rau cov lag luam thiab cov neeg siv khoom lag luam," Paul Bischoff, tus kws lij choj ntiag tug ntawm Comparitech, hais rau Lifewire ntawm email. "Qhov ntawd suav nrog cov chaw taws teeb thiab tsis siv neeg firmware thiab software hloov tshiab, kev tswj tus kheej, thiab kev encryption."
Yog tsis muaj kev ruaj ntseg zoo dua, tej yam yuav raug mob zuj zus.
Tiv Thaiv Koj Tus Kheej
Txoj kev yooj yim tshaj plaws kom tsis txhob ua txhaum IoT yog kom tsis txhob nruab ib qho khoom siv hauv tsev ntse. Tab sis yog tias koj kiag li yuav tsum muaj lub tswb nrov lossis lub koob yees duab kev ruaj ntseg, muaj kev ceev faj koj tuaj yeem ua tau. Ua ntej, xav txog cov khoom siv uas tsis siv internet.
"Koj tuaj yeem xaiv lub koob yees duab kev ruaj ntseg uas khaws cov vis dis aus ntawm lub cuab yeej hauv zos tsis yog huab server," hais Bischoff. "[Thiab] koj tuaj yeem xa cov khoom siv IoT los ntawm VPN ntsia ntawm koj lub router Wi-Fi, uas zais koj qhov chaw nyob IP tiag thiab qhov chaw thiab encrypts cov ntaub ntawv hauv kev thauj mus los."
Thaum peb coj cov thev naus laus zis ntau ntxiv rau hauv tsev, cov neeg ua phem hauv cyber yuav ua rau lawv nyiam cov txheej txheem tshiab no.
Thaum kawg, qhov tseem ceeb tshaj plaws yog nco ntsoov tias kev ruaj ntseg ntawm koj cov cuab yeej yog koj lub luag haujlwm.
"Cov neeg siv khoom yuav tsum xyaum ua kom huv cyber zoo nrog lawv cov khoom siv IoT," Tyrrell hais. "Qhov twg ua tau, hloov tus neeg siv lub npe thiab tus password. Tsuas yog txuas cov cuab yeej tsim nyog rau hauv internet. Nkag siab tias nws yog koj txoj haujlwm ua tus tswv cuab yeej hloov kho thaj ua rau thaj, thiab ua li ntawd tsis tu ncua. Thaum kawg, tuav lub network sib cais hauv koj lub tsev rau txhua yam khoom siv IoT kom txo tau qhov cuam tshuam ntawm kev ua txhaum cai ntawm ib qho ntawm cov khoom siv ntawd."
