Computer scientists say 'red button attack' leaves millions of smart TVs vulnerable
Flaw in the HbbTV standard gives hackers a way in to home networks
Computer scientists from Columbia University have warned of a critical vulnerability in smart TVs that lets hackers quickly and anonymously hijack home networks.
In a recently-published paper Yossi Oren and Angelos Keromytis say the so-called ‘red button attack’ (named after the button on remote controls that bring up interactive content) allows hackers to post spam through users' social networks, launch attacks against other computers and even hijack the microphones and cameras built into some TVs.
The attack affects any device that is compatible with the HbbTV industry standard (it's short for hybrid broadcast-broadband) which the researchers says is deeply flawed, essentially offering an open network to any individual with a cheap radio amplifier and a few lines of code.
Oren and Keromytis say that with a £260 device a hacker in an urban area could target “more than 20,000 devices in a single attack”. They could do this without being identified, taking control of any online accounts accessed through the TV as well as looking for vulnerable devices on the same network.
Oren and Keromytis told Forbes magazine that they had warned the body responsible for the standard only to be told the attack wasn’t severe enough to merit any action. HbbTV has been adopted in many European countries including France, Germany and Spain – although the standard is not widespread in the UK and has not been introduced to North America.
Life & Style blogs
iPhone 5C could be killed next year, and Apple’s cheap and cheerful line might die with it
Girl, 7, gets Tesco to remove 'stupid' sign suggesting superheroes are 'for boys'
Coke milk? Coca-Cola to launch premium milk brand called Fairlife
Black Friday: Best fashion deals -online and on the high-street
UK's first plus-size fashion magazine Slink hits the shelves: 'Style doesn't stop at size 8'
Ukip says babies born to immigrants in the UK should be classed as migrants – which would include Nigel Farage’s own children
The young are the new poor: Sharp increase in number of under-25s living in poverty, while over-65s are better off than ever
Tamir Rice: 12-year-old boy playing with fake gun dies after being shot by Ohio police
Rochester aftermath: Sacking of Emily Thornberry will make work of Labour MPs '10 times harder'
Ed Miliband's 'north London set' must be demolished to save Labour, say critics
Sarah Vine criticises lesbian mother Jack Monroe: 'If she was unsure about her sexuality, she should have taken greater precautions'
- 1 Exodus Gods and Kings: Ridley Scott never considered casting 'Mohammad so-and-so from such-and-such' in lead role
- 2 This letter from a reader explains why women can’t play football
- 3 'You should come to my house and eat cheeses with me': 4-year-old sends adorable love letter to girl at school
- 4 Scientists predict green energy revolution after incredible new graphene discoveries
- 5 Michael Buerk wishes he'd killed Jimmy Savile when he had the chance - by pushing him overboard a cruise ship
iJobs Gadgets & Tech
£20000 - £25000 per annum + 55,000 OTE + benifits: h2 Recruit Ltd: Software Sa...
£20000 - £22000 per annum: Argyll Scott International: Service Desk Analyst Re...
£20000 - £40000 per annum: Recruitment Genius: This leading provider of web an...