Live Breaking News & Updates on Link Kasa Smarthome

by Lubomir Stroetmann, Consultant and Tobias Esser, Consultant
The
TP-Link HS110 Wi-Fi is a cloud-enabled power plug that can be turned on and off remotely via app and offers energy monitoring and scheduling capabilities. As part of ongoing research into Internet of Things security, we performed a security analysis by reverse engineering the device firmware and Android app, sniffing app-to-device and device-to-app communications and fuzzing the proprietary protocols being used.
While cloud communication was found to be reasonably secure for an IoT device, we discovered two insecure proprietary local configuration protocols: A human-readable JSON protocol “encrypted” with an easily reversible autokey XOR cipher and a binary DES-encrypted configuration and debugging protocol ( ....

Kasa Smart Home , Lubomir Stroetmann , Tobias Esser , Public Primary Certification Authority , Denial Of Service , Link Device Debug Protocol , Smart Plug , Access Point , Link Smart Plugs , Smart Home , Boot Bootloader , Sign Class , Primary Certification Authority , Extended Validation , Blink Smart Home , Link Smart Home Protocol , Link Kasa Smarthome , Online Test , Atheros Radio Test , Link Routers , Link Cloud , Link Device Debug , Link Device , டோபியாஸ் கட்டுரை , பொது ப்ரைமரீ சிஇஆர்டிஐஎஃப்ஐசிஏடிஐஓஎன் அதிகாரம் , மறுப்பு ஆஃப் சேவை ,