A security researcher discovered security flaws within peer-to-peer communications technology built into millions of internet-of-things devices, KrebsOnSecurity reports. Paul Marrapese found the flaws in iLnkP2P, software developed in China that is found in web cameras, baby monitors and other IoT devices. The software allows users to access the devices anywhere around the world; however, it has no encryption or any form of authentication, and the code found on the bottom of the device can be easily calculated. Hackers can break into and establish a direct connection with the IoT devices through these means. In a proof-of-concept script he built, Marrapese identified more than 2 million vulnerable devices, with the majority of the machines located in China and Europe.
Full Story