Researchers have found that security gaps in smart bulbs can expose consumers to hacks.
Oct. 22, 2019 — Smart bulbs are expected to be a popular purchase this holiday season. But could lighting your home open up your personal information to hackers?
Earlier this year Amazon’s Echo made global headlines when it was reported that consumers’ conversations were recorded and heard by thousands of employees.
Now researchers at UTSA have conducted a review of the security holes that exist in popular smart-light brands. According to the analysis, the next prime target could be that smart bulb that shoppers buy this coming holiday season.
“Your smart bulb could come equipped with infrared capabilities, and most users don’t know that the invisible wave spectrum can be controlled. You can misuse those lights,” said Murtuza Jadliwala, professor and director of the Security, Privacy, Trust and Ethics in Computing Research Lab in UTSA’s Department of Computer Science. “Any data can be stolen: texts or images. Anything that is stored in a computer.”
Some smart bulbs connect to a home network without needing a smart home hub, a centralized hardware or software device where other internet of things products communicate with each other. Smart home hubs, which connect either locally or to the cloud, are useful for IoT devices that use the Zigbee or Z-Wave protocols or Bluetooth, rather than Wi-Fi.
If these same bulbs are also infrared-enabled, hackers can send commands via the infrared invisible light emanated from the bulbs to either steal data or spoof other connected IoT devices on the home network. The owner might not know about the hack because the hacking commands are communicated within the owner’s home Wi-Fi network, without using the internet.
This study, titled “Light Ears: Information Leakage via Smart Lights,” was coauthored by Anindya Maiti and published in the September 2019 issue of the journal Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies.
Smart bulbs have moved beyond novelty to a lucrative mature market. Last year consumers spent close to $8 billion, and that amount is expected to more than triple to $28 billion in less than a decade.
“Think of the bulb as another computer,” adds Jadliwala. “These bulbs are now poised to become a much more attractive target for exploitation even though they have very simple chips.”
Jadliwala recommends that consumers opt for bulbs that come with a smart home hub rather than those that connect directly to other devices. He also recommends that manufacturers do a better job in developing security measures to limit the level of access that these bulbs have to other smart home appliances or electronics within a home.
Learn more about the Security, Privacy, Trust and Ethics in Computing Research Lab.
Celebrate UTSA’s 50th anniversary year and share social media posts about the 50th using the hashtag #UTSA50.
Connect with UTSA online at Facebook, Twitter, YouTube, Instagram and LinkedIn.
UTSA Today is produced by University Communications and Marketing, the official news source of The University of Texas at San Antonio. Send your feedback to news@utsa.edu. Keep up-to-date on UTSA news by visiting UTSA Today. Connect with UTSA online at Facebook, Twitter, Youtube and Instagram.
Emerging artists work in the full range of traditional methods and materials as well as in interdisciplinary and new media. Themes range from social and cultural critique to investigations that are challenging and exquisite explorations in creative form and image.
UTSA Art Gallery, Arts Building, Main CampusJuan Vallejo’s art conveys his experience as a childhood migrant worker. Opening reception: Thurs, Dec. 5, 6–9 p.m. Free and open to the public.
UTSA Terminal 136, Blue Star Arts Complex, 136 Blue St., San AntonioPortions of Cook Road will be closed for construction related to the new Student Success Center project and Americans with Disabilities Act sidewalk upgrades.
Cook Road, Main CampusOut of the violence comes a silence, then a song. Thus begins an extraordinary night of camaraderie, music and peace. A remarkable true experience, told in the words and songs of the men who lived it. UTSA partners with The Public Theater for this event. Contact the theater at (210) 458-3288 for scheduling requests.
Buena Vista Theater, Downtown CampusForty-six modular units will be delivered to Main Campus as part of the new Student Success Center project. The units will enter campus at Brennan Avenue and will travel to their final destination, south of the North Paseo Building and Graduate School and Research Building via Tobin Avenue, Bauerle Road and Devine Avenue.
Brennan Avenue, Tobin Avenue, Bauerle Road, Devine Avenue, Main CampusEnjoy two classic holiday performances. Children’s Ballet of San Antonio will present two of The Nutcracker. Our Lady of Guadalupe Church will perform a traditional Pastorela play, a morality tale about shepherds going to Bethlehem and the snares the devil uses to dissuade them. Performances are included with regular ITC admission.
UTSA Institute of Texan Cultures, 801 E. César E. Chavez Blvd., San AntonioCelebrating graduating students from the College of Engineering and the College of Liberal and Fine Arts. Guest speaker: Susan Pape '86, chairman of the San Antonio Express-News.
Alamodome, 100 Montana St., San AntonioThe University of Texas at San Antonio is dedicated to the advancement of knowledge through research and discovery, teaching and learning, community engagement and public service. As an institution of access and excellence, UTSA embraces multicultural traditions and serves as a center for intellectual and creative resources as well as a catalyst for socioeconomic development and the commercialization of intellectual property - for Texas, the nation and the world.
To be a premier public research university, providing access to educational excellence and preparing citizen leaders for the global environment.
We encourage an environment of dialogue and discovery, where integrity, excellence, inclusiveness, respect, collaboration and innovation are fostered.
