108: Nebarious

Embedded.fm · 8 Jul 2015 · 1h 30m

What this episode covers

Jen Castillo, a firmware engineer at Rebelbot, discusses the critical security and privacy challenges in wearable computing, using her company's 'Item' watch as a case study. She highlights the inadequacy of Bluetooth Low Energy (BLE) security, the risks of cloud data storage, and the ethical implications of monetizing user health data. Castillo also references the Nymi band's biometric authentication and suggests HIPAA guidelines as a useful checklist for non-medical devices.

Mentioned

Companies
Rebelbot, Apple
Products
Nymi band, Item
Chips
Nordic, TI
Also
Mike Ryan, EFF Secure Messaging Scorecard, HIPAA

Other shows on the same ground, closest first.

  • The Next Byte Podcast · 26m

    55. Wearable Tech for Owners and Pets

    Hosts Daniel Scott Mitchell and Farbod Moghaddam discuss wearable technology for human health monitoring and pet safety. They analyze a study by Washington University at St. Louis showing that Fitbit data, processed by machine learning, can predict post-surgical complications better than traditional risk calculators. The hosts then explore the emerging market for pet wearables, highlighting companies like Link and Vet Chip that use Bluetooth Low Energy and LTE-M chips from Nordic Semiconductor to track location and health metrics.

  • 011 - Making Too Many Assumptions

    Bluetooth security researcher Mike Ryan, founder of Ice 9 Consulting, discusses his journey from hacking Game Boy ROMs to exposing critical vulnerabilities in Bluetooth products, including Boosted Skateboards and Fuse credit cards. He explains how developers often fail by implementing custom cryptography or ignoring threat models, such as the risk of a credit card being handed to a waiter, leading to data exposure. Ryan advocates for using built-in BLE security and provides a detailed workflow for reverse engineering using tools like Ubertooth, Wireshark, and CrackLE to analyze protocol flaws and pairing weaknesses.

  • EE Times Current · 36m

    IoT Security is only as good as its weakest link

    Nitin Dahad hosts an episode on IoT security featuring John Moore of the IoT Security Foundation, who emphasizes that security is a process requiring resilience and vulnerability disclosure policies rather than a static certification. Sharon Hagi, Chief Security Officer at Silicon Labs, explains the 'silicon to cloud' ecosystem approach, arguing that security is only as strong as its weakest link across the entire device, network, and cloud stack. Emmanuel Sambuy of Silicon Labs details specific security implementations for medical devices, including the Series 2 Bluetooth Low Energy (BLE) portfolio, Secure Vault technology, and compliance with Diabetes Technology Society (DTSec) standards.

  • The Spark Gap · 46m

    The Spark Gap - Episode 8

    Jacob Rosenthal, an engineering consultant working with companies like Octoblue, explains the current state of the Internet of Things, noting it is often a rebranding of existing connectivity technologies. He discusses the trade-offs between Wi-Fi and Bluetooth Low Energy, highlighting issues with power consumption, security, and proprietary firmware stacks on platforms like Spark, Electric Imp, and Pinocchio. The conversation covers the shift of intelligence from embedded firmware to cloud-based JavaScript, raising concerns about privacy, data ownership, and the replacement of embedded engineers by web developers.

  • Hackaday Podcast · 1h 04m

    Ep064: The COBOL Cabal, the Demoscene Bytes, and the BTLE Cure

    Hackaday editors Mike Szczys and Elliot Williams discuss the Apple/Google Bluetooth LE contact tracing API, analyzing its privacy-preserving design, adoption challenges, and potential for abuse. They review several hardware hacks, including Oliver Matson's broken inductor bike chain sensor, Marcus Young's ESPHome home automation setup, and a rapid prototyping system for iron-on e-textiles. The episode concludes with a deep dive into the 'COBOL crisis,' exploring the language's enduring role in critical infrastructure and the difficulties of maintaining legacy systems.

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Embedded.fm. The episode itself belongs to its publisher.