Category: security

Episode 325: The IoT goes to Congress

Hello! This week we start with Congress, where the U.S. Senate Judiciary Committee held hearings related to interoperability and lock-in tied to smart home devices. We drew special attention to testimony by Jonathan Zittrain, who wrote a long, but insightful statement about the development of the web, the benefits gained when using interoperable protocols, and what the government should do to ensure the openness of the IoT. After that, we discuss Amazon’s use of person detection on its new Echo Show devices to use motion-sensing as a trigger for routines and Apple’s planned features for its next smartwatch. We then talk about the new Level lock and why you may want to wait before buying a smart lock. In our news roundup, we track the rise of smart home devices, IKEA’s new $199 picture frame speaker, a new cellular module, and Accenture’s acquisition of umlaut, an industrial IoT engineering firm. We close on a question from a listener about which devices will support Matter going forward.

IKEA’s new speaker hides within a picture frame, but IKEA has limited art available. Image courtesy of IKEA.

Our guest this week is Lesley Carhart, an incident responder at Dragos. Carhart’s specialty is industrial IoT incident response which means she’s been busy, given how often ransomware attacks have taken out critical infrastructure in the past few months. She explains how she got into doing industrial security and how it differs from IT security (which she also did). She shares what industrial clients want IT security professionals to understand, and shares how people can get into the field of providing industrial IoT security. In my favorite moment, she explains the Purdue Model of security used by manufacturing and industrial clients. Understanding these things will only become more important as we place more assets online. Please listen.

Host: Stacey Higginbotham and Kevin Tofel
Guest: Lesley Carhart, an incident responder at Dragos Sponsors: Bsquare and Edge Impulse

  • A few remedies to prevent lock-in by the tech giants
  • Wellness is gaining ground in the smartwatch world
  • Maybe wait on that smart lock purchase
  • Hardhats may be necessary for industrial IoT security response
  • What the OT world wants the IT world to know about security

Podcast: Play in new window | Download | Embed

Subscribe: RSS

Episode 323: Stick with Sidewalk, y’all

This week’s show is going to get controversial with a discussion of Amazon’s Sidewalk. Kevin is out on vacation this week, so my friend Chris Albrect of The Spoon is here to co-host.   We start with a rundown on why I think you should participate in Amazon’s Sidewalk network but also explain how to opt out. We then talk about how tech-savvy lawyers helped push Amazon to drop arbitration clauses, the meatpacking hack, and new rules from the Army’s CIO on IoT devices in the home. Then we focus on fitness, discussing the potential for connected rower Hydrow to go public, Google’s plans for Fitbit, and the speculation around Apple’s upcoming Airpods. We end by answering a question from an electrician about what we’d like to see in a newly built smart home.

The Level Lock. Image courtesy of Level.

Our guest this week is Ken Goto, the co-founder and CTO of Level Lock. I invited him on the show because I am fascinated by how well the company has adapted to changing software requirements for the smart home. So I asked him what sort of planning that took and how the company approaches things like Homekit, Alexa, Matter, and even Amazon’s Sidewalk. Goto is actually a big fan of Sidewalk, and talks about what it can offer customers of the lock and what it does for him as a developer. We close with a look ahead at the technology he’s really excited about seeing in the smart home. Enjoy the show.

Hosts: Stacey Higginbotham and Christ Albrecht
Guest: Ken Goto, CTO of Level Lock
Sponsors: Bsquare and Very

  • If you opt-out of Amazon’s Sidewalk, do it for the right reasons
  • The Army is alerting teleworkers to smart home security flaws
  • Why not take a smart rower public
  • How Level tried to future proof its devices
  • Level’s CTO explains why he’s excited about Amazon’s Sidewalk

 

 

Podcast: Play in new window | Download | Embed

Subscribe: RSS

Episode 322: Google’s Fuchsia looks promising for the IoT

Did you know that Roku aims to get into the smart home game? We discuss that along with a new set of vulnerabilities in Bluetooth during the first part of the show, before moving onto Google’s new Fuchsia OS and some updates from Google I/O. After that, we discuss surveillance technology from China and the need for more discussion and disclosure around new technology purchases by local governments. We touch on a proposed data privacy law, new HomeKit support for the Eero 6 routers, and Wyze night lights. We end the news segment by answering a listener question about the Wyze security system and Yale locks.

A DroneExpress drone and package. Image courtesy of DroneExpress.

Our guest this week is Beth Flippo, CTO at Telegrid, which owns DroneExpress. DroneExpress has built a drone delivery service based on drone and radio technology built by Telegrid for the military. With DroneExpress, Flippo aims to build a business delivering items weighing less than five pounds within a small radius. This month Kroger announced it was trying the service for grocery delivery. We discuss why Teregrid decided to sell a service as opposed to the technology, what niche drone delivery serves, and even how widespread drone delivery could change consumer packaging. We also talk about the limitations of drones and Flippo’s belief that drone delivery could reinvigorate brick and mortar businesses.

Hosts: Stacey Higginbotham and Kevin Tofel
Guest: Beth Flippo, DroneExpress
Sponsor: Very

  • What will Roku do in the smart home?
  • Kevin thinks Google’s Fuchsia OS will be good for the IoT
  • Technology is a tool, but we need to understand its potential uses
  • Why sell hardware when you can sell a service?
  • How drone delivery might influence the size of consumer packaged goods

Podcast: Play in new window | Download | Embed

Subscribe: RSS

Episode 321: Google decides Matter matters

This week’s show focuses on news from Google I/O 2021 where it’s clear the search giant is trying to build out a fairly open ecosystem based on the Matter protocol and WebRTC for audio and video streaming. Google also said it would use Wear OS for Fitbit and combine Wear OS with Samsung’s Tizen OS. Google also announced a CarKey deal with BMW. There’s bad news on the data-sharing front from Imperial College London and Northeastern University, where researchers tracked how many connections popular smart home devices opened, and what it means for privacy. In security news, Consumer Reports found flaws in four security cameras and video doorbells, and we discuss the Eufy video camera bug. Additionally, cyber risks are so high that the CEO of Swiss Re, a reinsurer, said insurance for cyberattacks was becoming impossible. Finally, we mention the new Echo Frame options, although Kevin is still not a fan. In our hotline, we answer a question about Matter and keeping a SmartThings hub.

Google CEO Sundar Pichai speaking at Google I/O 2021. Image courtesy of Google.

Our guest this week is Mark Hanson, VP of Innovation at Sony Semiconductor America. We talk about embedded computer vision and what it means to have machine learning taken care of on the image sensor itself. It enables lip-reading applications, occupancy sensing, and new ways to track inventory in stores. (He’s very excited about  inventory sensing cameras.) Hanson also says the sensor and its DSP can provide training at the edge, allowing a user to show the sensor images and then have the sensor later recognize those images. We also talk about how product designers can figure out if they need a camera for a particular use case.  Hanson really wants to get new ideas from everyone listening about use cases for embedded computer vision, so see if any of the interview sparks your creativity.

Hosts: Stacey Higginbotham and Kevin Tofel
Guest: Mark Hanson, VP of Innovation at Sony Semiconductor America
Sponsor: Very

  • Google will embrace Matter in most displays, smart speakers and on Android
  • Do you know who your smart devices talk to?
  • Cyberattacks are becoming too big for insurance to cover
  • Why adding ML to an image sensor makes sense
  • How to use a “dumb” sensor to offload some computing tasks

 

Podcast: Play in new window | Download | Embed

Subscribe: RSS

Episode 320: Project CHIP becomes Matter and hacked pipelines

This week’s show hits on two of the biggest stories of the year for the smart home: Project Connected Home over IP is now called Matter and Amazon’s Sidewalk Network adds Tile as a participant. We also discuss what it means for Zigbee after the Zigbee Alliance changed its name to the Connectivity Standards Alliance.  The Colonial Pipeline ransomware also merits some attention. We then spend time on some news bits such as Amazon updating its Echo Show devices for the video calling era we seem to be in, Wyze’s new earbuds with noise-canceling technology, and the new Phyn leak detection sensors. We also discuss the FragAttack vulnerabilities and try to explain them. We conclude by answering a listener question about whether we’ll see Thread on phones anytime soon.

The Phyn puck, cable, and extension node combine to create a compelling option for sensing leaks. Image courtesy of Phyn.

Our guest this week delves even deeper into the Matter protocol. Kevin Po, a senior product manager at Google, is involved in the Matter working group. Po explains the multi-admin feature that will let consumers swap ecosystems with ease if they have Matter-certified devices, and lets me pester him with specific questions for those who might have multiple ecosystems in one home, or those that might want to use different smartphones.  He also lays out some of the security features and explains where he thinks device makers should try to differentiate themselves as the Matter standard develops. He also foreshadows some Google-related Matter news at Google I/O next week, so we should probably pay attention.

Hosts: Stacey Higginbotham and Kevin Tofel
Guest: Kevin Po, a senior product manager at Google
Sponsor: Very

  • Project CHIP becomes Matter and the Zigbee Alliance becomes the Connectivity Standards Alliance
  • Why the Colonial Pipeline really shut down
  • Amazon’s Sidewalk network is better than Apple’s Airtags at one thing
  • Will Matter let me have Alexa and Google in my home?
  • Is Matter an attempt for the big three tech firms to dominate the smart home?

Podcast: Play in new window | Download | Embed

Subscribe: RSS

Episode 318: Lawsuits galore and Silicon Labs bets it all on the IoT

This week’s show starts off with two lawsuits: the first filed by ADT alleging trademark infringement against Ring, and the second a decision by the Seventh Circuit of the U.S. Court of Appeals related to police accessing cell phone location data without a warrant. Wemo’s new scene controller, Everactive’s energy harvesting sensors, a discussion about Helium’s tokens, and a new network partner are next. We then cover some financial news with Life360 acquiring Jiobit for $37 million, Safehub getting $9 million in funding, and $55 million for OpenSpace, a startup that brings the IoT to construction. Then, Kevin shares his thoughts on Eve Aqua, a HomeKit and Thread compatible faucet controller. Finally, we close with a listener question about whether your smart home should have its own email address.

An image taken from ADT’s lawsuit alleging trademark infringement by Ring.

This week’s guest is Matt Johnson, the newly named president of Silicon Labs. He and I discussed Silicons Labs’ divestiture of its automotive and industrial lines of business to Skyworks for $2.75 billion. With this deal, Silicon Labs is going all-in on the IoT, and we talk about what that means for the company. He shares his thoughts on what the IoT requires from chipmakers in terms of hardware and software. We also explore how Silicon Labs plans to continue adding security for the IoT and the growth of machine learning on edge devices, and how that will affect chip design.

Hosts: Stacey Higginbotham and Kevin Tofel
Guest: Matt Johnson, president of Silicon Labs
Sponsors:  DigiCert and Qt

  • ADT files another lawsuit against Ring
  • Will we try Wemo’s new HomeKit-enabled scene controller?
  • Helium expands its mining and network operations
  • Why Silicon Labs sold off a big chunk of its business
  • The two biggest trends in the IoT are security and AI

Podcast: Play in new window | Download | Embed

Subscribe: RSS

Episode 316: Everything you need to know about Project CHIP

This week’s show launches with a deep dive on Project Connected Home over IP after the Zigbee Alliance released many new details about the specification. We discuss when you can expect it, the devices you’ll see, and the security model. Then we cover the new Wyze lamp, smart auto-dimming windows, Logitech killing the Harmony remote, and Spotify’s new Car Thing. On the enterprise side, we cover a new IoT device vulnerability, funding for Density, a people counting company, and Edge Impulse making it easier to build edge-based ML models on the Raspberry Pi 4. Kevin then shares his thoughts on Logitech’s CircleView camera. We end with a question on what will happen to Z-wave and Zigbee if CHIP succeeds.

The Swarm Tile gets integrated into a sensor or device and costs $119. Image courtesy of Swarm.

Our guest this week is Sara Spangelo, the CEO of Swarm. She talks about Swarm’s monthly $5 per device pricing model and how Swarm can offer satellite connectivity for that price. We also talk about which customers are using Swarm today and why the company decided to focus on one-to-one connectivity as opposed to building a gateway. We conclude with a conversation on how to evaluate a satellite provider since there are so many options available for customers. I have to admit, I’m coming around to the idea of IoT coverage delivered via satellite as a legitimate business proposition.

Hosts: Stacey Higginbotham and Kevin Tofel
Guest: Sara Spangelo CEO of Swarm
Sponsors: DigiCert and Qt

  • CHIP won’t support wearables, appliances, or cameras at launch
  • Why Project CHIP is embracing the blockchain for security
  • Should your service really have a hardware product?
  • Why the satellite era is upon us
  • How to figure out what satellite networks can and can’t do

Podcast: Play in new window | Download | Embed

Subscribe: RSS

Episode 315: A Mad Max mask and a power grid of your own

This week Kevin is back and we start the show talking about the Xupermask from Will.i.am and Honeywell. Ring is adding radar to a floodlight camera and we’re pumped for that, while MIT researchers are using RF to help give robots X-ray vision. Apple is formally launching a certification program for developers who want to build for its Find My service, Verizon is expanding its edge computing partnership with Amazon Web Services, and we also talk about the end of 3G. More water plant hacks, Amazon Alexa adding a skills platform for businesses, new Ikea speakers, and tweaks to Google’s Home app round out the news segment of the show. Kevin also shares his review of the Wyze Watch. Finally, we answer a listener question about if and how platforms such as Home Assistant or OpenHAB can handle deprecated APIs for smart home devices.

Eaton’s new Alexa Wi-Fi dimmer is part of a portfolio of products that fit into its Home as a Grid concept. Image courtesy of Eaton.

Our guest this week is Jennifer Ploskina, connected solutions segment manager with Eaton. Eaton makes electrical equipment for utilities, industry, and homes. We talk about how demand for electricity will force utilities, homeowners and building owners to invest in a smarter grid.  She argues that we will eventually have energy generation capabilities that will help offset demand from the grid, and may one day even provide additional revenue streams for homes or offices. And she explains how we’ll get to the place where homes have batteries, solar and other features that will turn them into little power stations. We also discuss standards, Alexa, and the potential for Project Connected Home over IP. Enjoy the show.

Hosts: Stacey Higginbotham and Kevin Tofel
Guest: Jennifer Ploskina with Eaton
Sponsors: Digicert and Qt

  • The Will.i.am mask is not totally ridiculous
  • Apple expands its proprietary ecosystem to asset finding
  • Some “hackers” are employees and companies need to deal with that
  • What happens when your home or office has a mini power grid?
  • Turn your EV battery into a revenue stream

Podcast: Play in new window | Download | Embed

Subscribe: RSS

Episode 311: How P&G’s plans for smart products evolved

This week’s show has a security focus with us discussing the Verkada hack, a new security camera from Abode, which basically puts expensive IP cameras on notice, and recommendations from Consumer Reports on helping victims of domestic abuse lock down their devices and services. We then talk about a rumored Alexa robot, a new Raspberry Pi chip designed for TinyML, the new State of Edge report from LF Edge, and Honeywell’s latest smart building acquisition. On the new products and services front, we cover Best Buy’s plan to sell fall detection and emergency services using the Apple Watch, the Sonos Roam, and a new air sensor from Airthings that detects particular matter. Kevin shares his opinion about the Logitech Circle View Doorbell as he continues to deploy HomeKit in his home. We close by answering a listener question about sensors for small businesses.

Airthings View Plus will track particulate matter and will cost $299. Image courtesy of Airthings.

This week’s guest is Julie Setser, SVP of R&D at P&G Ventures. She and I discuss how P&G Ventures operates and what sorts of products they are interested in bringing to market. We talk about how the phone can help create a new relationship with a consumer, even if the product isn’t connected. We also discuss what P&G has learned from its previous forays into connected devices and how that influences Procter & Gamble going forward. I like the holistic view they are taking around smarts, consumer products, and respecting the user’s time and experience. Enjoy the show.

Hosts: Stacey Higginbotham and Kevin Tofel
Guest: Julie Setser, SVP of R&D at P&G Ventures
Sponsor: Switch Always On

  • This camera hack is a good example of why MFA rocks
  • Companies will spend $800 billion on edge computing from 2019-2028
  • Are we going back to Sonos with the new Roam Bluetooth speaker?
  • How P&G Ventures works and what it’s looking for
  • P&G is using the smartphone to change its relationship with customers

Podcast: Play in new window | Download | Embed

Subscribe: RSS

Episode 307: Wi-Fi 6 for IoT and water plant security

This week’s podcast starts off with the launch of the Tuya Wi-Fi 6 modules, which will bring features of Wi-Fi 6 to IoT devices. Keeping on the Wi-Fi theme, we also discuss the new Shelly Wi-Fi motion sensor. We then talk about the new Raspberry Pi Pico, and the Raspberry Pi Foundation’s first custom chip before delving into Bosch’s win with AIoT. In consumer news, we cover rumors of an Amazon wall-mounted display and Fitbit’s addition of glucose monitoring. Then we explain why Renesas is buying Dialog Semiconductor, new funding for SecuriThings, and a big round for IoT security company Armis. We end by answering a listener question about Wi-Fi 6 for IoT devices, which brings the show full circle.

Tuya’s new Wi-Fi 6 modules will bring next-generation Wi-Fi to IoT devices. Image courtesy of Tuya.

This week, our guest is Beau Woods, a cybersecurity expert who came on the show to discuss this week’s hack of a water treatment plant in Florida. He lays out the hack and lets us know whether we should freak out or not. After discussing that particular hack, we dig into the nature of threats facing the IoT and how the landscape has changed in the last four years, touching on ransomware, the new IoT Cybersecurity Act, and more secure chips. We end with Woods promoting his upcoming book, Practical IoT Hacking, which will teach readers how to hack IoT devices and help the non-technical get a sense of the types of threats they need to consider as they design their products. Enjoy the show.

Hosts: Stacey Higginbotham and Kevin Tofel
Guest: Beau Woods, a cybersecurity expert
Sponsors: Very

  • What to expect from Wi-Fi 6 IoT devices
  • The smallest Pi has a custom-designed microcontroller and runs FreeRTOS
  • Why smart homes need a display or some useful ambient notifications
  • Should we freak out over Florida’s water treatment plan hack?
  • Organized crime and hackers are teaming up

Podcast: Play in new window | Download | Embed

Subscribe: RSS