Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!us.feeder.erje.net!feeder.erje.net!eu.feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: wjwlsn Newsgroups: comp.misc Subject: Re: Internet of Things + Big Data - Security = ... Date: Wed, 12 Feb 2014 00:23:10 -04-59 (UTC) Lines: 18 Message-ID: References: Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8Bit X-Trace: individual.net jMGwHpuZ7YipmQLafFIi+wLnIdag2bgudKckqvqKJPfO99e5N8 Cancel-Lock: sha1:snldrCMyqUuc2cjDADkTxcZbiKc= User-Agent: NewsgroupsRT/Version 9 In-Reply-To: Xref: csiph.com comp.misc:283 > So what happens when you have 'net connected sensors and controls everywhere, organizations hell-bent on capturing and mining every bit of data they can for power or profit, and shoddily implemented security measures hidden all over the place? > Argh. I somehow posted this without any additional info. "http://www.wired.com/opinion/2014/01/theres-no-good-way-to-patch-the-internet-of-things-and-thats-a-huge-problem/" "We're at a crisis point now with regard to the security of embedded systems, where computing is embedded into the hardware itself - as with the Internet of Things. These embedded computers are riddled with vulnerabilities, and there's no good way to patch them." "http://www.datamation.com/security/2014-the-year-of-big-data-leak.html" "The emergence of Big Data will radically change the risks associated with data breaches. In the past, cyber-crooks mainly sought discrete pieces of information, such as credit card numbers or user names and passwords. It's not going to be long before cyber-crooks start breaking into databases to do their own data mining. They already do a primitive version of t his on social networks, and it won't be long before they want to know as much about you as Google does." "http://krebsonsecurity.com/2014/02/target-hackers-broke-in-via-hvac-company/" "It's not immediately clear why Target would have given an HVAC company external network access, or why that access would not be cordoned off from Target's payment system network. But according to a cybersecurity expert at a large retailer who asked not to be named because he did not have permission to speak on the record, it is common for large retail operation s to have a team that routinely monitors energy consumption and temperatures in stores to save on costs..."