They are touted as the next
bit thing in technology – smart watches that can keep you up to date right from
your wrist.
However, experts have
warned they could also be the next big target for hackers.
A video reveals just how
easy it is to read messages sent to a smart watch running Google's Android
software.
'Smart watches, bands and
devices all have a lack of security.
'We trust these devices
with everything from messages and Facebook updates to biometric information,'
said Liviu Arsene of Bit defender, which uncovered the issue.
'Everything from SMS
messages to Facebook or Google Hangouts chats are constantly being forwarded to
your smart watch.'
He found that Google's
Android Wear software relies on a six digit pin code to link to watches.
'This six digit pin code
can be easily brute forced,' he said.
'It was not all that that
difficult to do.'
'Because the Android Wear
obfuscation relies on a pin code of only six digits during the initial pairing,
an attacker wouldn’t take long to brute-force number and start reading your
conversations in plain-text,' he wrote.
'Of course, this means an
attacker would have to be fairly near the victim and log all intercepted
Bluetooth data packets, but the large-scale adoption of such an exploit could
be fuelled by the increasing number of smart watches or smart bands.
'Weaponizing it could only
be a matter of time.'
For the proof-of-concept, a
Nexus 4 Android device equipped with Android L Developer Preview and Samsung
Gear Live were used.
'The implications of these
recent findings are only moderately surprising – we know from past experience
that adoption of new technologies does not always go hand-in-hand with better
security practices.'
Android Wear watch was
unveiled by Google at its developer conference in San Francisco earlier this
year.
The firm showed off the
latest watches running Android wear, a version of Android designed for wearable
computers.
'It's finally possible to
make a powerful computer small enough to wear on your body,' said Google's
David Singleton.
It showed off the LG G
watch, which shows the users the most relevant alert at the time - for
instance, a flight they are about to get or an upcoming meeting.
Google also revealed apps
for its watches, including a food ordering app from Eat that allows users to
order favourite food directly from their wrist, and a recipe app called all the
cooks that walks users through recipes on the watch face.
LG said the G Watch would
initially be made available to 12 countries including the US, UK, France,
Germany and Japan, adding that it would announce its price and shipping date
shortly.
'As one of the first
Android Wear devices to market, we see this as the beginning of a long-term
commitment to making wearables running Android Wear a household name,' said Dr.
Jong-seok Park, president and CEO of LG.
'We’re confident that once
consumers see how useful and compelling LG G Watch can be, it will be
integrated into their daily lives, just as smartphone have done.'
Source:http://www.dailymail.co.uk/sciencetech/article-2870710/Hacking-alert-Android-WATCHES-Experts-reveal-gadgets-infiltrated-read-messages-sent-wrist.html
No comments:
Post a Comment