Smart Toilets Vulnerable to Hackers


What's This?


Satistoilet

Maybe some technologies should just be left without smart capabilities.


Consider this: the "Satis" smart toilet can allegedly be compromised by an attacker. The Atlantic reported that information security company Trustwave Holdings' SpiderLabs has issued an advisory pertaining to these fancy thrones. Since the Satis smart toilet can be controlled with an Android app, Trustwave SpiderLabs warns that an attacker could compromise those controls via Bluetooth.



The Satis is made by LIXIL, a Japaense toilet manufacturer. The toilet — which retails for between $4,212 and $5,686, depending on the variation — boasts features like an automatic toilet seat, a power deodorizer, automatic flushing, cleansing nozzles, built-in lighting and an embedded speaker for music.


The Satis' Android app connects to the toilet with a hard-coded Bluetooth PIN: "0000." This security loophole could reportedly make Satis owners vulnerable, as Trustwave SpiderLabs notes:



As such, any person using the "My Satis" application can control any Satis toilet. An attacker could simply download the "My Satis" application and use it to cause the toilet to repeatedly flush, raising the water usage and therefore utility cost to its owner.


Attackers could cause the unit to unexpectedly open/close the lid, activate bidet or air-dry functions, causing discomfort or distress to user.



If these security breaches do happen, let's just hope no one has taken a seat.


Image: LIXIL Corporation


[h/t The Atlantic]


Topics: Android, hacking, smart appliance, smart home, Tech, Toilet




0 comments: