だが、そのソフトに脆弱性があり、情報が垂れ流しになる恐れがあるという。
【便器・トイレ 取替え工事は愛知・岐阜・三重 名古屋】イナックス サティスGタイプ グレードG82013年新商品 タンクレストイレ・便器 価格:389,550円 |
5686ドルというから、57万円のトイレ、My Satis.
ブルートゥース接続をスマートフォンとするのだが、そのピンコードが0000がデフォルトだそうだ(そんなこと書かなくてもいいのにとも思うが)。
http://www.bbc.co.uk/news/technology-23575249
Luxury toilet users warned of hardware flaw
A luxury toilet controlled by a smartphone app is vulnerable to attack, according to security experts.
Retailing for up to $5,686 (£3,821), the Satis toilet includes automatic flushing, bidet spray, music and fragrance release.
The toilet, manufactured by Japanese firm Lixil, is controlled via an Android app called My Satis.
But a hardware flaw means any phone with the app could activate any of the toilets, researchers say.
The toilet uses bluetooth to receive instructions via the app, but the Pin code for every model is hardwired to be four zeros (0000), meaning that it cannot be reset and can be activated by any phone with the My Satis app, a report by Trustwave's Spiderlabs information security experts reveals.
"An attacker could simply download the My Satis application and use it to cause the toilet to repeatedly flush, raising the water usage and therefore utility cost to its owner," it says in its report.
"Attackers could [also] cause the unit to unexpectedly open/close the lid, activate bidet or air-dry functions, causing discomfort or distress to [the] user."
The limited range of bluetooth means that anyone wishing to carry out such an attack would need to be fairly close to the toilet itself, said security expert Graham Cluley.
"It's easy to see how a practical joker might be able to trick his neighbours into thinking his toilet is possessed as it squirts water and blows warm air unexpectedly on their intended victim, but it's hard to imagine how serious hardened cybercriminals would be interested in this security hole," he told the BBC.
LIXILの製品。
【このカテゴリーの最新記事】
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image