Office for iPad has arrived, but while there’s little question now that tablets can be used for productivity, sometimes it takes a real keyboard to get proper work done. Thankfully … Continue reading
Fear not, owners of Belkin WeMo devices: you no longer have to lose sleep over the possibility that your smart plug will be hacked. Belkin has rolled out an update that patches the five vulnerabilities listed by FEMA’s Computer Emergency Readiness Team. This security hole affects up to 500,000 WeMo devices, and as CERT states, the vulnerability could result in anything from a fire to the waste of electricity.
These holes were recently discovered and announced by IOActive, Inc. As the press release states, the security company made several attempts to contact Belkin about the issues, but Belkin was unresponsive. So IOActive turned to CERT who also issued a statement. However, per a statement Belkin sent to TechCrunch (embedded below), Belkin was in fact in contact with the security research firm prior to their public statement.
Specifically, Mike Davis, IOActive’s principal research scientist, identified that through several different means, hackers could remotely access Internet-connected WeMo products, upload custom firmware, remotely monitor devices and access local networks.
The update Belkin recently issued patches these holes.
This speaks to a larger issue. As the Internet of things takes off, hackers and malicious coders have an increasing number of targets. It’s not inconsivable that in the near future, KitchenAid will have to issue a security patch for a toaster or blender.
Belkin’s Statement
Belkin has corrected the list of five potential vulnerabilities affecting the WeMo line of home automation solutions that was published in a CERT advisory on February 18. Belkin was in contact with the security researchers prior to the publication of the advisory, and, as of February 18, had already issued fixes for each of the noted potential vulnerabilities via in-app notifications and updates. Users with the most recent firmware release (version 3949) are not at risk for malicious firmware attacks or remote control or monitoring of WeMo devices from unauthorized devices. Belkin urges such users to download the latest app from the App Store (version 1.4.1) or Google Play Store (version 1.2.1) and then upgrade the firmware version through the app.
Specific fixes Belkin has issued include:
1) An update to the WeMo API server on November 5, 2013 that prevents an XML injection attack from gaining access to other WeMo devices.
2) An update to the WeMo firmware, published on January 24, 2014, that adds SSL encryption and validation to the WeMo firmware distribution feed, eliminates storage of the signing key on the device, and password protects the serial port interface to prevent a malicious firmware attack
3) An update to the WeMo app for both iOS (published on January 24, 2014) and Android (published on February 10, 2014) that contains the most recent firmware update
Belkin had already patched the security loophole which could allow hackers to remotely take control of users’ WeMo plugs and whatever was plugged into them, the company says, as long … Continue reading
Belkin WeMo home automation products open to hackers, security researchers say don’t use them
Posted in: Today's ChiliBelkin has a number of home automation products in its WeMo line. The Belkin WeMo LED lighting products were launched in January. Belkin also offers a WeMo light switch along … Continue reading
Google’s surprise acquisition of Nest was met with no small amount of horror from existing users of the company’s thermostats, but other players in the smart home segment aren’t so … Continue reading
[CES 2014] Belkin might have made a name for itself in the world of networking devices over the years, but this does not mean that the company does not have different kinds of concerns elsewhere. In fact, this time around, we have the introduction of the Belkin Crock-Pot Smart Slow Cooker, which is a slow cooker that allows you to control as well as monitor cooking times and temperatures using your smartphone. Yup, the smartphone has just gotten a whole lot smarter I guess, but it remains to be seen whether consumers are willing to fork out additional money to upgrade the appliances in their home that will be able to meet the expectations of a new generation.
After all, a slow cooker might be smart as all get out, but if you still fail as a cook and even burn your kettle as you boil water, it ain’t gonna do much. Still, being able to expand home automation features is a nice way of moving along forward, and who knows? Smart appliances will eventually gain acceptance among the masses in time to come. Do you think that the $99 asking price is too high, considering it is double that of a normal Crock-Pot?
Belkin Crock-Pot Smart Slow Cooker Announced original content from Ubergizmo.
Belkin has added to its growing WeMo smart home system with a new LED lightbulb, allowing for remote control of lighting around the home or office from an Android or … Continue reading
Slow cookers are great because you can throw in your ingredients in the morning and by the time you get home from work dinner is done. But stuff happens, and sometimes you forget about that pot roast simmering away, and next thing you know you burn your meal and your house down. Enter the WeMo Smart Crock Pot to solve all your woes.
Belkin’s connected home efforts are moving forward at a rapid clip, and its WeMo line has a number of new products on display at CES 2014 this year. There’s a connected lightbulb set similar to Philips Hue, a connected slow cooker for lazy cuisine, and the WeMo Maker, which allows enterprising users to make any existing DC appliance into a smart device.
The LED-based WeMo connected bulbs come in either a starter set with three for $129, or individually in single bulb packs for $39.99. They have 800 lumens, and are 60 watt equivalent with a warm white tone. They can be controlled each on their own, or in pre-assigned groups, and they are connected to a WeMo link, which is included in the starter pack and can manage up to 50 bulbs. You can turn them on and off over the web, run vacation programs, dim them and control from both iOS and Android via the WeMo app.
Unlike the Philips Hue, they don’t offer changeable colors, but they are cheaper per unit once you get set up with a starter kit, and they work with Belkin’s existing WeMo setup, which is a big seller for those already invested in the ecosystem.
The new WeMo crock-pot lets you turn the slow cooker on or off from anywhere, get reminders about the state of your meal, change the temperature remotely and either control things manually or use built-in calculators for time and temp. It retails for $99.99, which actually isn’t that far off from some nicer slow cookers on the market, and can be controlled from the WeMo app for iOS or Android too.
Finally, and most interesting of all, Belkin is making it possible to take legacy hardware and then turn that into a WeMo-enabled accessory. You can add Internet control to anything with a DC switch, the company says, and allows you to schedule those device or turn them on or off manually from anywhere you have a connection. It’s like a more sophisticated and integrated version of their smart outlet WeMo products, with additional features that let you watch and control a huge range of 5V DC-powered sensors. So if a moisture sensor connected to the maker notices that it’s rained, it’ll prevent your connected sprinkler system from going on as previously scheduled. The Maker can also be combined with IFTTT recipes for advanced intelligent programming.
All these new WeMo gadgets are expected to ship this upcoming spring, and new features will be added to the WeMo control app on iOS and Android starting in February via software updates.
Belkin clearly wants to own the fast-growing connected home space, and this new range of gadgets indicates it’s tackling the problem from a number of different angles at once.