FTC Takes Aim at D-Link for IoT Security
In a legal complaint, the FTC makes multiple allegations about improper security measures in D-Link devices that could potentially enable attacks. D-Link calls the claims «vague and unsubstantiated. »
The U. S Federal Trade Commission (FTC) filed a legal complaint against networking equipment vendor D-Link Corporation on Jan. 5, alleging that the company has inadequate security measures in its products, leaving consumers at risk. D-Link denies the allegations.
In a 31-page legal complaint , the FTC outlined multiple alleged failings in D-Link’s security. According to the complaint, D-Link, «…failed to take reasonable steps to protect their routers and IP cameras from widely known and reasonably foreseeable risks of unauthorized access… «
Among the issues alleged by the FTC complaint are hard-coded user credentials, which are embedded passwords in devices that users cannot easily change, that could enable an attacker unauthorized access. The FTC also warns about command injection flaws that might potentially enable a remote attacker to gain control of a vulnerable D-Link device.
The FTC also takes issue with how D-Link secures mobile application login credentials, which allegedly are now being stored in a non-encrypted readable text format. As well, the FTC is concerned with how D-Link has managed its own private encryption key, that is used to validate the authenticity of D-Link’s software.
«Hackers are increasingly targeting consumer routers and IP cameras — and the consequences for consumers can include device compromise and exposure of their sensitive personal information,» Jessica Rich, director of the FTC’s Bureau of Consumer Protection, said in a statement. «When manufacturers tell consumers that their equipment is secure, it’s critical that they take the necessary steps to make sure that’s true. «
In an email sent to eWEEK, D-Link stated that it denies the allegations outlined in the complaint and is taking steps to defend the action.
«The security of our products and protection of our customers private data is always our top priority,» the company stated.
In a publicly posted response to the FTC claims, D-Link states that the allegations are vague and unsubstantiated. Additionally, D-Link notes that the FTC complaint does not claim any specific breach of any D-Link product.
«The FTC speculates that consumers were placed ‘at risk’ to be hacked, but fails to allege, as it must, that actual consumers suffered or are likely to suffer actual substantial injuries,» D-Link states. «D-Link Systems maintains a robust range of procedures to address potential security issues, which exist in all Internet of Things (IOT) devices. «
The FTC has been actively working in recent years to help protect consumers against potential dangers rising from improperly secured Internet of Things (IoT) devices. In January 2015, the FTC released a report providing recommendations to vendors on how to improve IoT security.
In February 2016, networking vendor Asus settled with the FTC, over wireless router security issues. In the Asus case, the company agreed to maintain a comprehensive security program that includes its wireless routers and associated firmware being independently audited every two years for the next 20 years.
Earlier this week on Jan. 4, the FTC announced the $25,000 IoT Home Inspector Challenge to help improve security in connected home devices.
Sean Michael Kerner is a senior editor at eWEEK and InternetNews.com. Follow him on Twitter @TechJournalist.
© Source: http://www.eweek.com/security/ftc-takes-aim-at-d-link-for-iot-security.html
All rights are reserved and belongs to a source media.
За минувшие сутки в результате боевых действий в зоне АТО погибших украинских военнослужащих нет, но один получил ранение в районе Новозвановки. Об этом сообщил на брифинге спикер Министерства обороны по вопросам АТО Александр Мотузяник, передает пресс-центр СНБО. 
Многие эксперты-международники видят намерение части американского истеблишмента бросить вызов Китаю, который пытается завоевать доминирующую роль на Дальнем Востоке. Практически нет сомнений в том, что следующий президент США Дональд Трамп попытается ужесточить и без того не слишком мягкую американскую политику в отношении КНР. Возможные решения американской администрации и изменение политики на Востоке будут определяющими, как минимум, в 2017 году.
Украина в связи с усилением морозов увеличивает подъем природного газа из своих подземных хранилищ в 1,7-2 раза по сравнению с первыми числами января – до 100 млн куб. м в сутки. 
По данным Минздрава, уже четыре человека погибли от переохлаждения. Об этом сообщил замминистра здравоохранения Александр Линчевский на заседании межведомственного оперативного штаба, передает корреспондент ЛІГА.net . 
По информации ГФС, в прошлом году Украина закупала уголь в России на общую сумму — 906,3 млн. долл., США — на 212,1 млн. долл., Канаде — на 94,4 млн. долл. и других стран — на 254,3 млн. долл. 
SAP has unveiled its SAP Hana 2 platform, the company’s in-memory database technology, combined with microservices and made available in the cloud via SAP Hybris-as-a-service. 
The UK has quite a stake in the inception of the modern video game since the industry’s heyday in the early 1980s, but it turns out the country has been cracking out classics ever since. 
Про це повідомляє Головне управління розвідки Міністерства оборони України. 
Про це йдеться у дослідженні Австрійського інституту економічних досліджень (WIFO), пише DW. 
