# 108: Nebarious

- Show: [Embedded.fm](https://hardwarepodcasts.com/podcast/embedded-fm)
- Published: 2015-07-08
- Length: 1h 30m
- Page: https://hardwarepodcasts.com/podcast/embedded-fm/2015-07-08-108-nebarious
- Listen: https://makingembeddedsystems.libsyn.com/embedded-ep108mp3

## Summary

Jen Castillo, a firmware engineer at Rebelbot, discusses the critical security and privacy challenges in wearable computing, using her company's 'Item' watch as a case study. She highlights the inadequacy of Bluetooth Low Energy (BLE) security, the risks of cloud data storage, and the ethical implications of monetizing user health data. Castillo also references the Nymi band's biometric authentication and suggests HIPAA guidelines as a useful checklist for non-medical devices.

## Chapters

- [0:06](https://hardwarepodcasts.com/podcast/embedded-fm/2015-07-08-108-nebarious#t=6) Introduction and Conference Talks
- [1:52](https://hardwarepodcasts.com/podcast/embedded-fm/2015-07-08-108-nebarious#t=112) Nymi Band Teardown and Biometrics
- [5:04](https://hardwarepodcasts.com/podcast/embedded-fm/2015-07-08-108-nebarious#t=304) Wearables Growing Up: Security and Ethics
- [7:03](https://hardwarepodcasts.com/podcast/embedded-fm/2015-07-08-108-nebarious#t=423) HIPAA Compliance as a Security Checklist
- [14:06](https://hardwarepodcasts.com/podcast/embedded-fm/2015-07-08-108-nebarious#t=846) BLE Security Flaws and MAC Address Randomization
- [37:39](https://hardwarepodcasts.com/podcast/embedded-fm/2015-07-08-108-nebarious#t=2259) Data Privacy, Monetization, and Server Risks
- [1:15:55](https://hardwarepodcasts.com/podcast/embedded-fm/2015-07-08-108-nebarious#t=4555) Biometrics and Physical Security
- [1:27:03](https://hardwarepodcasts.com/podcast/embedded-fm/2015-07-08-108-nebarious#t=5223) Art, Tech, and Dance Conference Call

## Topics

- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)
- [Wireless & RF](https://hardwarepodcasts.com/topic/wireless-and-rf)
- [Sensors & measurement in products](https://hardwarepodcasts.com/topic/sensors)
- [Certification & compliance](https://hardwarepodcasts.com/topic/certification-and-compliance)

## Most relevant to

early-stage companies

## Mentioned

- Nymi band (product)
- Item (product)
- Rebelbot (company)
- Mike Ryan (other)
- Nordic (chip)
- TI (chip)
- Apple (company)
- EFF Secure Messaging Scorecard (other)
- HIPAA (other)

## Related episodes from other shows

- [55. Wearable Tech for Owners and Pets](https://hardwarepodcasts.com/podcast/the-next-byte-podcast/2022-02-01-55-wearable-tech-for-owners-and-pets) (The Next Byte Podcast)
- [011 - Making Too Many Assumptions](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2018-06-03-011-making-too-many-assumptions) (Unnamed Reverse Engineering Podcast)
- [IoT Security is only as good as its weakest link](https://hardwarepodcasts.com/podcast/ee-times-current/2020-05-26-iot-security-is-only-as-good-as-its-weakest-link) (EE Times Current)
- [The Spark Gap - Episode 8](https://hardwarepodcasts.com/podcast/the-spark-gap/2014-08-05-the-spark-gap-episode-8) (The Spark Gap)
- [Ep064: The COBOL Cabal, the Demoscene Bytes, and the BTLE Cure](https://hardwarepodcasts.com/podcast/hackaday-podcast/2020-04-24-ep064-the-cobol-cabal-the-demoscene-bytes-and-the-btle-cure) (Hackaday Podcast)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/embedded-fm/2015-07-08-108-nebarious. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to Embedded.fm.