Uma webcam, um carro e um marca-passo. Perturbadoramente, hoje em dia o que isso tudo tem em comum é a inserção em um mundo cada vez mais conectado e apressado. As maravilhas da comunicação moderna facilitam em muito saber se o leite na geladeira está lá há tempo demais ou se o bebê está dormindo bem; mas no mercado de dispositivos assim, produtos são empurrados para o consumidor e não necessariamente a continuidade do suporte é mantida, e um belo dia seu ar condicionado está atacando a internet da Libéria.

A comunidade maker sabe muito bem o que está fazendo e conta com uma série de plataformas legais para revolucionar o mundo. Ainda assim, para cada entusiasta preocupado com a segurança do seu Raspberry Pi temos uma infinidade de produtos direcionados para o consumidor que não está exatamente preocupado em trocar o usuário e senha padrão do seu roteador.

Nesta apresentação falo sobre causos curiosos de ataques e vulnerabilidades nos eletrônicos do nosso dia-a-dia, algumas das tecnologias que tendem a aparecer em breve; e como tentar minimizar a possibilidade de ser vítima de insegurança de algo que você trouxe para casa.

# Slides

PDF (minificado)

# Referências

• Wikipedia: The Jetsons

  • https://en.wikipedia.org/wiki/The_Jetsons

• 2017 is a Cyberpunk Dystopia

  • https://thenib.com/cyberpunk-dystopia

• This $400 appliance that squeezes juice out of a bag appears unnecessary

  • https://arstechnica.com/information-technology/2017/04/this-400-appliance-that-squeezes-juice-out-of-a-bag-appears-unnecessary/

• Get started with your Juicero Press - iOS

  • https://www.youtube.com/watch?v=-i0UugILBJg

• 600,000 GPS trackers for people and pets are using 123456 as a password

  • https://arstechnica.com/information-technology/2019/09/600000-gps-trackers-for-people-and-pets-are-using-123456-as-a-password/

• RISK: Is This Your Webcam? You’re Being Watched

  • https://www.wizcase.com/blog/webcam-security-research/

• How Volkswagen’s ‘Defeat Devices’ Worked

  • https://www.nytimes.com/interactive/2015/business/international/vw-diesel-emissions-scandal-explained.html

• More Insights on Alleged DDoS Attack Against Liberia Using Mirai Botnet

  • https://thehackernews.com/2016/11/ddos-attack-mirai-liberia.html

• BMW, Audi and Toyota cars can be unlocked and started with hacked radios

  • http://www.telegraph.co.uk/technology/2016/03/23/hackers-can-unlock-and-start-dozens-of-high-end-cars

• Apple’s hired contractors are listening to your recorded Siri conversations, too

  • https://www.theverge.com/2019/7/26/8932064/apple-siri-private-conversation-recording-explanation-alexa-google-assistant

• Fitness wearables: Who's tracking who?

  • http://www.csoonline.com/article/3044553/mobile-security/fitness-wearables-whos-tracking-who.html

• Medical Devices Are the Next Security Nightmare

  • https://www.wired.com/2017/03/medical-devices-next-security-nightmare/

• Samsung’s Tizen is riddled with security flaws, amateurishly written

  • https://arstechnica.com/gadgets/2017/04/samsungs-tizen-is-riddled-with-security-flaws-amateurishly-written/

• Nest thermostat owners left without heating after software glitch

  • http://www.telegraph.co.uk/technology/news/12099033/Nest-thermostat-owners-left-without-heating-after-software-glitch.html

• On Smart Cities, Smart Energy, And Dumb Security

  • https://media.ccc.de/v/33c3-8272-on_smart_cities_smart_energy_and_dumb_security

• SimpliSafe Alarm Bypassed With a $2 Device From Amazon

  • https://www.youtube.com/watch?v=UlNkQJzw4oA

• IoT devices are hard to patch: Here's why—and how to deal with security

  • https://techbeacon.com/security/iot-devices-are-hard-patch-heres-why-how-deal-security

• IoT has an obsolescence problem

  • https://www.networkworld.com/article/3279729/iot-has-an-obsolescence-problem.html

• Why American Farmers Are Hacking Their Tractors With Ukrainian Firmware

  • https://www.vice.com/en_us/article/xykkkd/why-american-farmers-are-hacking-their-tractors-with-ukrainian-firmware

• Alternative software

  • Android phones - Lineage OS https://www.lineageos.org/
  • Old canon cameras - Magic Lantern https://magiclantern.fm/
  • MP3 players - Rockbox https://www.rockbox.org/
  • Comma.ai - Self-driving cars https://comma.ai/

• Router firmware

  • OpenWrt https://openwrt.org/
  • pfSense https://www.pfsense.org

• How to make your own Faraday Cage

  • https://www.pcmag.com/article/335782/how-to-make-your-own-faraday-cage

• How to Rip the Mics Out of Your MacBook and iPhone

  • https://www.wired.com/story/remove-the-mic-from-your-phone/

• MinION portable genome sequencer

  • https://nanoporetech.com/products/minion

• Inner Workings: Portable DNA sequencer helps farmers stymie devastating viruses

  • https://www.pnas.org/content/116/9/3351

• Portable DNA sequencer helps identify severity of Lassa outbreak in Nigeria

  • https://medicalxpress.com/news/2019-01-portable-dna-sequencer-severity-lassa.html

• First Ever Non-invasive Brain-Computer Interface Developed

  • https://www.technologynetworks.com/informatics/news/first-ever-non-invasive-brain-computer-interface-developed-320941

• Imagining a new interface: Hands-free communication without saying a word

  • https://tech.fb.com/imagining-a-new-interface-hands-free-communication-without-saying-a-word/

• On Technical Debt in IoT projects

  • https://internet-of-things.cioreview.com/cxoinsight/technical-debt-legacy-code-and-the-internet-of-things-nid-14976-cid-133.html
  • https://www.cmswire.com/digital-experience/beware-of-technical-debt-in-iot-projects/

• ‘Microwaves that turn into cameras’: Conway defends Trump claim by implying wider domestic surveillance at play

  • https://news.yahoo.com/microwaves-that-turn-into-cameras-kellyanne-conway-defends-trump-claim-by-suggesting-wider-domestic-surveillance-140048040.html

# Por aí

• 1ª Cryptofriday - 2019-09-20 - Flonópx, Brazil