Black Box Device Research reveals Pitiful State of Internet of Things Security

Researchers at Ben-Gurion University analyzed 16 off-the-shelf IoT devices (baby monitors, cameras, doorbells, thermostats, etc.) using low-cost reverse-engineering techniques and found pervasive security flaws: default and recoverable passwords, extractable firmware, and design weaknesses that enabled remote takeover. They demonstrated practical exploits including creating an isolated Mirai-style botnet and accessing camera feeds, and note real-world exposures (thousands of vulnerable cameras and at least one leaked-camera incident), recommending stronger manufacturer security practices and user precautions.