Security Vulnerabilities in Top Christmas Gifts

Security Vulnerabilities in Top Christmas Gifts

Internet connected devices might be the hot item for Christmas this year, but are they secure?

  • By Sydny Shepard
  • Nov 23, 2018

Smart devices are on everyone Christmas list this year. From smart assistants to connected toys, everyone wants an Internet of Things device under the tree. But before you go gifting these top gifts this holiday season, it might be worth it to check whether or not it is one of the good ones.

Mozilla has produced a ranking of 70 top gifts this holiday season based on its security risk level. Each device was graded on a number of measures including the data it collects, is the data encrypted and when is it transmitted. Mozilla also looked at who the data is shared with and what is the worst-case scenario if something did go wrong. 

Here are just a few products that received the lowest scores on the list, a few might surprise you.

FREDI Baby Monitor

The FREDI Baby Monitor was on Mozilla's list as one of the "creepier" devices. The product, made to help parents check in on their little ones has a camera and microphone with connected app. According to Mozilla, the product does not use encryption and does not require the user to change the default password of "123," easily making the camera hackable. The camera also does not have automatic security updates, a way to fill in any holes that are vulnerable.

Mozilla says that the "product does a seemingly poor job protecting privacy and security." Potentially, someone could, and it has been proven before that they can, access the video feed and spy on the user and its family. 

Dobby Pocket Drone

This drone is one of the smallest and cheapest drones on the market this holiday season. The device touts HD video, 360-degree views and a size that will literally fit in your pocket. However, without a minimum security standard and privacy policy, it doesn't matter if this drone can fit in your pocket. 

Mozilla says this product doesn't fit the bill for their security standards and the relaxed security of the device could lead to videos being taken by someone else or your location data stolen by someone you don't know.

Petzi Treat Cam

This camera designed to allow pet owners peek in on their pets when they are not home seems like a good idea. The device allows you to see, talk and fling treats at your pet through a connected app. It's wide-angle lens, high quality audio and app might make you think this is the perfect gift for your friend who is obsessed with their dog, but alas, this device did not meet Mozilla's minimum security standards.

The device does use encryption, but the right kind of hacker can, and will, use the device to spy on you and your dog. With the trendy functionality of the smartphone application, the hacker can also post pictures of your and your dog on social media. Creepy.

Click here to browse through all the products evaluated by Mozilla.


About the Author

Sydny Shepard is the Executive Editor of Campus Security & Life Safety.

Featured

  • Gaining a Competitive Edge

    Ask most companies about their future technology plans and the answers will most likely include AI. Then ask how they plan to deploy it, and that is where the responses may start to vary. Every company has unique surveillance requirements that are based on market focus, scale, scope, risk tolerance, geographic area and, of course, budget. Those factors all play a role in deciding how to configure a surveillance system, and how to effectively implement technologies like AI. Read Now

  • 6 Ways Security Awareness Training Empowers Human Risk Management

    Organizations are realizing that their greatest vulnerability often comes from within – their own people. Human error remains a significant factor in cybersecurity breaches, making it imperative for organizations to address human risk effectively. As a result, security awareness training (SAT) has emerged as a cornerstone in this endeavor because it offers a multifaceted approach to managing human risk. Read Now

  • The Stage is Set

    The security industry spans the entire globe, with manufacturers, developers and suppliers on every continent (well, almost—sorry, Antarctica). That means when regulations pop up in one area, they often have a ripple effect that impacts the entire supply chain. Recent data privacy regulations like GDPR in Europe and CPRA in California made waves when they first went into effect, forcing businesses to change the way they approach data collection and storage to continue operating in those markets. Even highly specific regulations like the U.S.’s National Defense Authorization Act (NDAA) can have international reverberations – and this growing volume of legislation has continued to affect global supply chains in a variety of different ways. Read Now

  • Access Control Technology

    As we move swiftly toward the end of 2024, the security industry is looking at the trends in play, what might be on the horizon, and how they will impact business opportunities and projections. Read Now

Most   Popular

Featured Cybersecurity

Webinars

New Products

  • FEP GameChanger

    FEP GameChanger

    Paige Datacom Solutions Introduces Important and Innovative Cabling Products GameChanger Cable, a proven and patented solution that significantly exceeds the reach of traditional category cable will now have a FEP/FEP construction. 3

  • Camden CV-7600 High Security Card Readers

    Camden CV-7600 High Security Card Readers

    Camden Door Controls has relaunched its CV-7600 card readers in response to growing market demand for a more secure alternative to standard proximity credentials that can be easily cloned. CV-7600 readers support MIFARE DESFire EV1 & EV2 encryption technology credentials, making them virtually clone-proof and highly secure. 3

  • Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

    Connect ONE®

    Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation. 3