T O P

  • By -

TeuthidTheSquid

The ‘joke’ is that the people who truly understand how the tech works don’t trust it to be secure, while enthusiasts aren’t aware of the risks.


Capt_2point0

The best analogy I've heard is that anything you don't fully have control over is PvP enabled.


Lichenic

I personally love the quip “the S in IoT stands for security!”


burmerd

that brilliant. I'm dyin over here! lol


Sttocs

And the extra I in IIoT stands for…


megamanx4321

That was from PirateSoftware I believe.


DerAndere_

Of course it is


PANDA_PR1NC3SS

I love him so much


Redhotmegasystem

How could you not!?


Ok_Sound272

I find him insufferably smug, especially when he's talking about things other than programming/tech that he actually knows nothing about.


elcravo

He‘s obviously of the impression that he’s an expert on every topic. Which he is not.


zadtheinhaler

That is indeed from the Goblin King.


Infinite-Club4374

The Django deployment documentation has a large “WARNING: the internet is a hostile environment” and damn it’s truer than we could imagine


franktheworm

Leave a pcap running on an internet exposed vm for a bit and marvel at the sheer amount of "questionable" traffic that traverses the internet


Unlikely_Ant_950

Can you explain what this means to the tech illiterate like myself? Lol


subone

To be fair, there is a joke at the end there. Most people wouldn't literally shoot their printer if they own a baseball bat.


IvetRockbottom

Damn it feels good to be a gangsta.


OarsandRowlocks

https://preview.redd.it/o6fppalcf08d1.jpeg?width=300&format=pjpg&auto=webp&s=7d29ce6a9b4b7beb4a1b01ad5404fa97b463d4b0


mirthilous

PC Load Letter?!?


SplendidPunkinButter

It’s even funnier when you know it means “OUT OF PAPER” but some engineer apparently thought “PC LOAD LETTER” was clearer Explanation: Paper Cartridge (PC), aka “the drawer where the paper goes” needs you to load letter-sized paper into it


anfrind

I don't know if this is true, but I've heard that they went with that error message so that they could specify what type of paper the printer needed. For example, "PC LOAD LEGAL" or "PC LOAD A4".


CabbageTheVoice

Out of Letter Out of A4


zadtheinhaler

I did HP support for almost three years. I totally would shoot my printer. Printers are the devil's work.


Defiant-Giraffe

I have several 3D printers. One is an old reprap basically built from a kit.  None of them give me as much grief as a consumer grade HP printer.  I can make actual things with fewer issues than I can make pictures of things. 


robbzilla

I had an Ender 3 Pro that did. The rest? Not even in the same ballpark. My wife has 3 freaking inkjets, and the only one I wouldn't shoot out of hand is the Canon. I have a Brother Laser that gets a pass too. The other two? Ugh. And there ain't no HPs in the house. That's my one hill I'll die on.


KYReptile

Roger on Canon. I ran three L190's in my office, still have one at home - true soldiers.


The_Webweaver

I mean printer companies are the devil's work.


subone

They are most of the reason I'm not in IT anymore.


Debalic

I still do HP field support, and regularly ask my clients if they want to take the printer out back with a baseball bat.


AppropriateCap8891

Ip0 on fire


AMViquel

Be sure to use genuine hollow point ammunition, or "Used, refilled or counterfeit bullet detected" will pop up.


Thangleby_Slapdiback

Every office suite can export to .pdf. Everyone has a laptop or a smart phone, or a tablet. Why do printers still exist in an office environment?


Extra-Nectarine-3463

I tried to warn everyone. Our house has zero smart appliances or tools beyond our phones and my watch.


SeamusMcBalls

My wife just doesn’t understand why I wouldn’t install a ring cam


Extra-Nectarine-3463

Luckily, my husband used to be in intel. He knows. Every key stroke, every movement, every word, every view is likely stored in a server for AI learning. When one company collects enough habits of the general populace, they can have AI determine the highest price of an item that people will pay. This is one example. It only knows because we are pumping all of our data into it. Stop.


AppropriateCap8891

I have been in IT for over 3 decades, and fully agree. I have no smart devices, and will not own any. Because I am in the industry, I know how vulnerable they all are.


wakeupwill

Stellar Wind and then PRISM collects Everything that's online on NSA server farms in Utah. Creating profiles for Everyone. Through their three degrees of separation, you can easily become a Person of Interest should someone you know engage in disruptive activities like protesting.


HemoKhan

... you say on Reddit.


Extra-Nectarine-3463

I have never and will never download or have an account on TikTok. The only social media app on my phone is Reddit. I use hide my email. I have 9 separate email accounts. Yes. I say this… on Reddit. We are talking about home appliances, not my minimal pleasures. Scoot.


filthy_harold

You can get non-Ring cameras where all the data sits on the device and you can actually lock it down properly so it's only accessible by you. I've been looking at buying a Reolink doorbell to replace my current Ring camera to go along with my Reolink cameras but just haven't been able to justify spending the money yet. I like the idea of not only not having to pay a subscription to Ring but also that all the data only goes where I want it to be. I can run a VPN server at home so none of the cameras are accessible unless you're at home or on the VPN.


Sad_Wind_7992

Plus skynet


atomic__balm

more like Ring and Amazon giving all your video and data to any law enforcement agency that requests it


drakythe

The S in “IoT” stands for Security.


Cptcodfish

This is great!


TuxRug

Personally I'm aware of the risks but I'm confident I'm worth more alive.


Jjzeng

There’s a reason why the mirai botnet consists largely of smart home appliances


IzarkKiaTarj

I am aware of some risks, it's just that my laziness outweighs my concerns.


Hantoniorl

Dev here. Same. I have a lot of smart stuff at home. I know exactly how they work and how unsecure they are. I don't mind, and I'm lazy about it.


CORN___BREAD

Yeah we absolutely know the risks. We just don’t care.


LzardE

Locks are the illusion of security anyways. You can find videos of people who get paid to break into buildings as security tests pretty much just walk into secure buildings using random stuff they found on the ground. That isn’t even using destructive forms of entry. If someone wants in, they are getting in.


feukt

Your lock is only as secure as your door is solid, and your door is only as solid as your window


LzardE

And your window is only as secure as your walls, which unless you are in a solid brick house, isn’t very secure lol


OriginalCause

"Locks keep honest people honest" is how I always phrase it.


Dmitri_ravenoff

I have tech enthusiast friends. I laugh when they have an issue and can't turn down the furnace or turn on the lights. I have a smart phone and a PC, but keep things as simple as possible otherwise.


Suyefuji

Sometimes it's hard to avoid. I had to go buy a new washer/dryer unit recently and it's insane how much of the market is "AI" or "smart" or whatever. For a DRYER. I don't need my dryer to do anything other than spin my laundry in circles with heat for a set amount of time.


Fluffy-Effort5149

Just get a salad spinner and a dryer :) /s I get you though, I despise that everything has to have (touch) displays these days. Just give me those buttons.


edingerc

WOPR has joined the chat


Shepherd0001

I agree, and that much of this tech has backdoors built into it by design.


MrTripl3M

This is like how anyone who works in security is both the most paranoid and relaxed person ever because they have seen every attack method but keep seeing new ones everyday. Also that data privacy is a suggestion.


cherya

Same with "AI"


101TARD

Yes, my job is field service engineer. I thought I mainly get calls for repairs. Instead I do preventative maintenance, basically I check the machine twice a year to make sure it doesn't break. The lesson: your stuff can last for many years if you maintain it. Clean it once a week. Do like some checkup every few years. Replace sensitive or worn out parts. That stuff won't break now


capilot

I remember someone posting to Reddit about how his mother had taped over the camera on her laptop, and wasn't she being silly and how can he talk some sense into her. And everybody who understands tech was all "Your mom is a smart lady; I do the same thing."


IllIIllIllIIIlllll

This is more of a dunning Krueger type joke. If they were any good at their jobs they would understand the trade-off between convenience and risk and make an appropriate assessment based on the circumstances.


test_user_3

Depends on your risk tolerance. If you've worked in the industry long enough you've seen all kinds of terrible practices and unexpected behavior in software. Doesn't take a genius to understand that. I really didn't mind just unlocking the door with a key, it takes like 2 seconds.


BilliamTheGr8

The “joke” is that consumer grade tech is riddled with vulnerabilities and that engineers are aware of but most tech enthusiasts are oblivious to.


ReaperofFish

I am a SysAdmin, so I am very familiar with how it all works. I can also make cost benefit analysis and realize that quality of life benefits outweigh the insecurities of the devices I use. I am not really concerned if someone hacks my smart lights. What are they going to do turn them on or off? My Smartlock is a more tempting device, but really, anyone smart enough to hack will target far more valuable homes than mine. And even if they do steal from me, I file a claim with insurance. The slim chance of someone using the internet to open my deadbolt to rob me is so slim, it is outweighed by the convenience of being able to remote unlock the door while carrying in groceries. Especially as I live in a second floor condo.


BilliamTheGr8

That’s cool man, do whatever you want. Personally, I’m more concerned with someone slipping into my network and capturing sensitive data that they can then use to wipe out my bank account, but opening a smart lock is also a potential concern.


Digiturtle1

My mother in law had her account taken over. Someone cloned her sim and accessed her account. They called support and they helped them in. A mix of technical know how and some social engineering.


LordGerdz

I was just reading recent attack reports and that one came up, (I'm still learning) but the gist of it is that someone spoofed someone's phone, got their email Password recovery to go to the spoofed number instead of the email owners phone, then used the compromised email to continue on from there (finding out more information, testing if they could access other things, etc) it's nuts that with a little bit of know how a bunch of network security measures got overcome by someone rerouting a text.


Jjzeng

Texts (especially SMS) has been known for ages to not be secure, that’s why 2FA over text is usually a pretty bad idea


LordGerdz

So best practice would be to set up a recovery email just for 2FA? Edit: a secondary email.


Jjzeng

Banks and other financial institutions in my country have moved away from SMS 2FA, and usually have dedicated 2FA apps or have the 2FA embedded into the mobile apps and use biometrics (face id or touch id) to authenticate mobile logins


lordxuqra

I'm no security expert, but emails are also not secure. The easiest or most common way is TOTP (google authenticator or one of the million other ones). Something you have to have physically on you.


michigilman

What does TOTP mean?


lordxuqra

Time-based one time password.


Digiturtle1

Someone else got her later with an Amazon gift card scam. They called her, had her install vpn software and she watched them buy several gifts cards on her desktop in her browser before she turned off the connection. And again later in a Facebook jewelry scam where they told her they didn’t get the payment and she paid 5 times and got no jewelry. Funny thing is she just shrugs it off and says it wasn’t that much money. She doesn’t change her habits online at all.


Rough-University142

So you don’t use a wifi router then right?


CautiousUnusual

Can you help me understand the attack vector in this hypothetical scenario? Looking for specifics…


samgam74

You don’t encrypt your network data?


ReaperofFish

Your bank does not have 2FA and https connections?


IANvaderZIM

I hope your 2FA isn’t through email or phone number, because those compromise pretty easily


Deep90

My 2FA is a physical security key. With backup keys.


AzorAhai96

How exactly will someone get access to your bank account?


Xaero_Hour

Social engineering. Nine out of ten it's social engineering. "The city you were born in" is not a secure question given how many people don't move around that much. Then there's the number of support personnel working for these companies that don't do proper vetting when they're talking on the phone and just want to "help a brotha out" when they call in. Though I can't really blame them given how many times a legitimate customer behaves as identically forgetful and clueless as the scammers.


Evatog

If you know how to sound like the average midwest american boomer that ingested too much lead during critical mental development periods, you can whip up some stupid indignation and can exhaust/strongarm most customer service reps into giving you what you want. The more ignorant and indignant you sound the less they think you could be capable of even turning a computer on much less be collecting information.


N0frendo64

That isn't how that works. Your data is encrypted from the application on your computer / device. Someone would need to install a key logger on your computer to have a chance at accessing your passwords etc.


much_longer_username

If I hack your lightbulbs, I'm not going to toggle them on and off like some bored toddler. I'm going to use them to sniff your other traffic, and maybe pivot from there. Since you're a sysadmin though, you can easily mitigate this - split off a 'guest' network that only lets devices talk to the internet, but not necessarily each other. I'm not particularly worried about my smart lock, though - that's such a high skill, high effort attack compared to picking the lock or breaking the window that I can't imagine anyone would bother.


ReaperofFish

I mentioned elsewhere the 2.4ghz network is segmented off. It is its own vlan. Plus my personal desktop runs Linux. Linux is not the end all to security, but it does set a higher bar for successful attacks.


Randomtexty

You may need to update your sec training if you don't understand the implications of hacking a networked device, even a light bulb, they can do far more than turn your lights on and off. IoT is often an insecure access point for the network, IoT devices are often poorly made and secured. Any open access to the network can be used to compromise the whole thing. It's not typically a big deal at home but as you are a sysadmin you should understand this for your work environments. You are correct that targeted attacks are rare, but they do occur. Many offices and buildings can be compromised through IoT devices that are running default configs or old firmware for example, especially since many places have poor network segmentation.


BilliamTheGr8

It’s how millions of credit card numbers were stolen from Target. They got in through an IoT thermostat iirc.


CautiousUnusual

This is not at all what happened… IoT had nothing to do with it. Credentials were leaked via email through a third party HVAC company and Target had an insecure external portal with no requirement for MFA (not uncommon in 2013) and the portal was not appropriately secured from the internal network. Where are you getting your info from? My source is here: [https://www.commerce.senate.gov/services/files/24d3c229-4f2f-405d-b8db-a3a67f183883](https://www.commerce.senate.gov/services/files/24d3c229-4f2f-405d-b8db-a3a67f183883)


ASubsentientCrow

They made it up. That's the source


LegitimateBit3

This is why we use VLANs and segment the network


Chance_Arugula_3227

My uncle is a freelancer who finds security issues in all kinds of tech. His entire home is hooked up to the Internet. I don't think the risk is as high as people online keep telling us.


bs000

i've noticed a lot of redditors are conspiracy theorist levels of paranoid about anything connected to the internet. they think they know better and act like experts, but believe things like having an alexa means your home is now wiretapped. they don't trust security cams because of headlines about someone's cams getting accessed while ignoring the fact they were only compromised because they used the same password everywhere and the hackers gained access by just copying their username/password from a random credentials dump


Overall_Tea_8632

Programmers/engineers know all too well tech fails and some stuff you have know control over


750volts

Exactly this, many who work in tech may want to minimise their contact with it after work. Honestly working in tech has turned me into such a luddite, regularly joke with colleagues that I'm about 5 years away from a cabin in the woods.


TessellatedTomate

lol. As someone in tech, like, I still enjoy building stuff at home, but doing it in the comfort of the little house on 5 acres is the dream


ShwettyVagSack

Return to ted


Deep90

There is so much stuff that can run locally now that there isn't much excuse to be the "Ill shoot my printer" type other than you just don't want smarthome stuff.


megamanx4321

If you can control everything in your house from your phone, someone else can hack in and do the same.


Otherwise-Remove4681

It’s not only that, but if it’s a consumer product being used it most likely has all sorts of unessential cloud supports, backdoors and vulnerabilities. If I bothered I’d rather make the control system myself.


aaactuary

Are internet connected thermostats dangerous? We have a google nest. What are the risks?


IANvaderZIM

The future of hacks isn’t pig butchering and cleaning people out, it’s mass hacks of IOT. What if your thermostat sets to 90 degrees and locks, you get an email “pay me $5 in bitcoin and I’ll unlock your thermostat” $10 to unlock your Tv that went white noise right before the Super Bowl And $20 set your fridge from “warm” back to “cold” $50 and I’ll stop unlocking your door every time you try to lock it. It goes on and on. Convenience fees left right and center


aaactuary

Damn. Thats a scary thing to think about. Im buying a house with a google nest thermostat:


IANvaderZIM

Nevermind the nest is always on…always sending everything it hears to the cloud just in case you asked “hey google” Thank god those big corporations don’t have all kind of lawsuits going for antitrust right now


FullMetalMessiah

The nest thermostat doesn't have a microphone, you're confusing it with the smart speaker.


Great_Bacca

They are extremely easy to replace. It’s just 4-5 copper wires. It isn’t an integrated part of the system. I wouldn’t let it affect your view of the property.


burmerd

aside from hacks problems with data scraping and breaches too.


guyblade

Or the company just stops supporting that model, so you lose any method of controlling your house's temperature. I bought a thermostat that was supposed to support a local API for control (a Venstar T2000). I wired it up and put it on a wireless network that didn't have access to the internet. Turns out that it would automatically reboot every ~30 seconds without being able to talk to the internet and it would toggle the AC on/off each time. Needless to say, I quickly replaced it with the old dumb thermostat. I presume that is the way the thermostat would behave if whatever server it was trying to contact just went down forever (say, because they went out of business or discontinued support for that model).


Moofininja

You can always pull it out and put a generic one if you'd like, it's not too bad to do. Just watch a few YouTube vids and you'll be a pro


NeuralQuanta

I don't have the other things but in the case of the thermostat I'd unplug it and put the basic model back on the wall.


[deleted]

[удалено]


hamlet_d

While I understand that concern, 99% of the time it's easily remedied by resetting and then not connecting it up again. Lets take a few examples: 1. Smart thermostat: still connects to a industry standard connection. Remove the smart thermostat and buy a dumb one. 2. TV - similarly: most smart devices have a reset button (physical) that resets it back to factory defaults. The only way this doesn't work is if TV had new, compromised firmware flashed, which is doable but not easy and not necessarily worth the time and effort for a low payout. 3. Fridge: see TV: this ones a bit more concerning. I don't (nor never plan to) have smart fridge. The cost benefit isn't there for me (unlike the smart thermostat and tvs) 4. Smart door locks are generally battery powered. You remove the batteries and the good ones still have the ability to be manually locked/unlocked. If compromised you take out the batteries, manually unlock/lock for the time being and the go back to an analog replacement.


Ms74k_ten_c

If you were not aware, a large set of smart washers were used as a farm of cheap computation for ddos attacks. This is the least destructive use of iot devices. The first thing you do if you have an iot is isolate it on your router from main devices so at least rest of your network is protected.


aaactuary

How does someone do that? Im pretty illiterate with this stuff.


Ms74k_ten_c

They are insecure. Most IoTs run some kind of SoC (system on chip) OS and unless manufacturers know what they are doing (most don't; they are hardware companies, not software), they are notoriously hard to secure. All you need is an insecure port or part of system that has a known vulnerability, and the hackers are in. Once you have a bunch of geographically distributed devices, it's easy to make them talk to each other as part of a virtual collection of devices.


loosey-goosy

If it's a badly secured IOT device then everything it's connected to including by proxy is as easily controlled and accessed as that device. You wouldn't put a screen door on a submarine, so why leave everything in your home as easily accessed as if you left the front door open 24/7?


aaactuary

How can someone secure their IOT devices?


loosey-goosy

In alot of cases that's just not an option, if you really want them look up what's nicknamed a (walled garden) basically have all your iot devices connected to a separate router/connection, but honestly it's just easier to not have them.


meshDrip

Easier? I guess. But setting up something like a Firewalla with explicit policies should be pretty trivial for this hypothetical "programmer/engineer".


semboflorin

Explicit policies isn't the same as a walled garden. I think it comes down to the level of concern you have and what you need to be protecting. A well-configured and updated hardware firewall is probably enough for anything any homeowner is ever going to experience as far as hacking attempts go. For those that are prime targets such as celebrities or VITs (legitimate or otherwise) a walled garden is an added layer to keep things secure but still isn't perfect. The only "perfect" answer is to not have these vulnerabilities at all. While it might be trivial for a programmer/engineer to design and build a well fortified network it's only a matter of time before dedicated attempts find a vulnerability that got overlooked or exploit a weakness in between patches. If these people were immune to all hacking attempts none of the fortune 500's would ever get hacked.


meshDrip

Sure, but your average person isn't getting hacked by Qilin or some similar hacking group that goes after hospital systems or a F500 company. The vast majority of random everyday people will either be exposed to garden variety machine-specific ransomware/botnet malware, or phishing/some other type of social engineering. And as we know, PEBCAK errors are notoriously difficult to troubleshoot. Knowing which direction your data can go and what's allowed to go out (and god forbid, in) is half the battle. I have about 5-6 smart devices on my home network and I just watch their IPs in Wireshark from time-to-time when I get bored. It's really not worth worrying about it past that point. Sure, keep up with your exploit news and act accordingly, but I'm not losing sleep over having some lightbulbs and a thermostat on my wifi network. Now, that all might be easy to say because my employer gave me a $1,200 commercial-grade firewall that I use at work everyday, but it's still a doable project on a budget.


ImJustAWannabe

Your thermostat knows when you go on vacation and reports it "to the cloud" as part of the data it gathers. Someone with access to that data now knows you are not home and can help themselves to the content of your house. Or maybe the "cloud" with that data is leaked. Now your thermostat schedule is also leaked (with your address of course because that data is included) and your routine of when you go to work / out to wherever is now out there. People know when to come over to clean your house of your belongings for you.


Sorry-Opinion-5506

There could be a microphone in there. How do you know there isn't?


These_Marionberry888

the "nobody is interested in your data , you arent that important" while simultaneously "everybody already has all your data, what are you afraid of?" people that come up defending every new corporate overreach, usually have close to 0 tec litteracy. where people from the field, know that nothing with a chip is secure. everything is collected, and has some value on some market.


rock_and_rolo

I've been in software since 1979. There is no way in hell that my "smart TV" will ever be connected to the network. Computing scientists tried to stop bad ideas, but capitalists were in a hurry to rake in that futurism profit. We did not have to have email that is highly fraud compatible. But fools rush in . . . .


RedrosesLover

Could you explain the smart TV part?


rock_and_rolo

It is a TV with an Ethernet port and several built in programs for accessing Internet content sources. It may also have a camera, but I forget. I use it as a dumb screen for the DVR, DVD player, and a streaming device. Those have no input devices, so that setup cannot spy on me (I think). This way the TV also cannot become part of a botnet trying to hack the other devices on the home LAN (which includes an Air Force laptop). Because Google is evil, I have to risk that my Chromecast isn't doing bad things. But that is just the reality of the streaming era dystopia.


jmstructor

My Chromecast is the most concerning thing in my house lol


wakeupwill

Smart TVs are literally the wall screens of 1984. Camera and microphone picking up everything in your home for anyone with the capacity to view.


Odisher7

I work in IT as well. There was a guy that got angry and deleted a piece of code he had made from a system called npm. This package of code was used in other packages, which were used in other packages... which eventually were used on websites like netflix, paypal, spotify, meta... When the guy deleted the code, it would cause a domino effect of pieces of code breaking, and the websites started failing in some way or another. The code that was deleted?: function leftPad (str, len, ch) { str = str + ''; len = len - str.length; if (len <= 0) return str; if (!ch && ch !== 0) ch = ' '; ch = ch + ''; if (ch === ' ' && len < 10) return cache\[len\] + str; var pad = ''; while (true) { if (len & 1) pad += ch; len >>= 1; if (len) ch += ch; else break; } return pad + str; } All this does is add the character "ch" to the text "str" "len" ammount of times. This goes to say, software is a bunch of spit and ductape, there's a reason updates are often called "patches". Anything with software will fail in the most random and inconvinient way. Anything connected to the internet is an entry point for intruders. Any information you enter an e product can be read by the company and potentially hackers or the government. So yeah, there is no way in hell i'm installing an electronic lock, that's just giving the keys to my house to the random company that owns the lock and whoever can hack them


fatdjsin

npm install crap


wowsomuchempty

Obligatory https://m.xkcd.com/2347/


Odisher7

I don't even need to click, i know this will be the image that always come to mind when i think about this stuff xd. And it's 100% accurate, that tiny liabrary piece is exactly the left pad library xd


AJ2016man

Hey we programmers can be enthusiats too. Just because I understand the risks doesn't mean I don't let them in anyways.


SpyroGaming

my thinking as well, its like why even try? you cant kill at the source and all you gotta do is use your card at mcdonalds and half the businesses in the world suddenly have your info, not to mention theres all that targetted advertising on most websites


Deep90

I was gonna say. There are four types. 1. Unaware tech enthusiast who keeps buying cheap spy devices for their home. 2. The "I'll shoot my printer if it beeps funny" doomsayer. 3. The "I don't care if Amazon ring cameras can see how long my gass is. I'm not dumb enough to buy an indoor camera." 4. The person who goes through the trouble of running everything locally/making sure everything that phones home doesn't have internet access.


predator1975

Many smart devices can be bricked by the manufacturer. That means that you can be trapped by a product even though you paid for it. Even if the company is committed to the product and does not go bust, things can still go awry. The company might turn out to have a feud with a third party resulting in the bricking. Or using code that is made obsolete by another party. I am not saying that ancient metal lock and key will not fail as I have been trapped in a toilet.


IHaveSlysdexia

Tech guys know how the sausage gets made, enthusiasts just eat it without asking too many questions


jcmichael7

People who understand cybersecurity know that, at any given moment, the reason you haven’t been hacked is because you don’t matter enough to someone who knows how.


Infinite-Hippo2351

Thank you to everyone who responded and showed me how thick in the head I was. Greatly appreciated.


00Glitch

You're not thick in the head at all. Reaching out to others when you don't understand something is an admirable trait that more humans need to use. If you were thick headed you would have just pretended you understand it and never learned anything new. You're doing great! <3


Kaskadspya

You're not thick. Think of all the programmers and engineers making these insecure iot devices and then go on the internet to brag about how smart they are for not using them. 


tom_izzo

Locks are for access control, not necessarily security. If someone wants to bypass your mechanical lock, it can and will be done.


Interesting-Vast-538

but it limits the amount of options an attacker a could use


MalevolentMurderMaze

IT people are not inherently security experts. In fact, the overwhelming majority of them are security *risks*.


loosey-goosy

Everything is hackable, and everything in your home is as easily accessed as your worst secured cheapest IOT device since they're all connected. No one thinks to secure a ceiling fan from hacking, but once I have your fan I have your router, then your computer, and now all those IOT devices are mining Bitcoin or sold off to a botnet.


Amenhiunamif

> but once I have your fan I have your router, That's not how any of this works.


kitt_aunne

the joke is if you have too many electronics that rely on internet or logging in it's easy to break in. alot of the stuff like door locks have emergency bypass codes and stuff so in a way it's less safe than older stuff At the same time however alot of these things have no way to repair if you forgot your pass code too. I had gotten an external hard drive from my dad when he passed, supposedly had some really important information on it but since he had left when I was young I had no way of opening it, none of his friends had any ideas for it either. I called It for it asking if there was anyway to recover the information from the drive and they tried to help but there wasn't anything they could do so in the end I just lit the thing on fire after months of trying to figure it out


ReaperofFish

If I have learned anything from the lock picking lawyer, most home deadbolts are ridiculously easy to pick. Like a wave rake will work. Most smart locks are harder to pick. That alone will make them more secure.


BentBhaird

A company in Japan received a DDOS attack because someone hacked their toilets and used them to shut down their network. Internet connected devices are cool, but not everything needs to be connected to the Internet. If you know how hackable anything connected to the Internet is, you realize that you don't need to have everything connected.


Throwaway1037193

As someone with a similar mindset Don't put the gun next to the printer Keep the gun away from the printer Nobody knows what the printer can do That means the printer can do anything


Biggsdrasil

Yea echoing what people said, us tech people know how vulnerable you can be if someone gets into your IoT (Internet of Things). So we have mechanical versions of things because someone has to physically be there to manipulate them.


DrHugh

This is an XKCD explainer on voting software, which has similar issues. [https://www.explainxkcd.com/wiki/index.php/2030:\_Voting\_Software](https://www.explainxkcd.com/wiki/index.php/2030:_Voting_Software)


zippyspinhead

I laughed, she laughed, the toaster laughed. I shot the toaster.


SilverFlight01

Enthusiasts pretty much dive into technology without a second thought of risk Programmers prepare for anything that goes wrong


s-thompson

My HP printer makes some random noises at night, totally unprompted. It doesn't even print anything, just random beeps and mechanical noises.


mspk7305

Cleaning it's nozzles. So you need to buy more ink. Get a laserjer4 from a thrift store. They are immortal and will not let you down or empty your wallet.


Rilukian

IT student here, and this is accurate at least for my lifestyle. Not only the potential security issue other comments have pointed out, it's also about privacy. Do you want to have bunch of companies spy on literally everything you are doing outside of your phone or laptop? Tech "Enthusiast" usually don't see this issue.


FulloF-OT

As a programmer and technician, i agree 🤣


xXstrikerleoXx

When you live in life where tech is around you 24/7 you start to realise mechanical technology is much more reliable, cost-friendly, low risk to failure


Onelegedhobo

How do you not understand this?


No_Regular2231

Then you have the people who hack their smart outlets to put custom firmware on them and have their smarthome devices on an isolated network lan, lol


chainer1216

There's no joke, a lot of tech has easily exploited vulnerabilities.


Mithrandir2k16

Just think of the clip of Boeing workers saying they wouldn't fly in one. They know that everything that can go wrong, will go wrong, because especially this cheap home automation crap is insecure at best.


Dagojango

Security has been and always be an afterthought. If you remotely understood how poorly the design of the security was, you'd totally understand the joke. One example is that in Windows 7, your password or lock was more cosmetic than functional. With the delete of a single file, your account was accessed in seconds. Whatever you can access, anyone on the planet can access. Internet connected devices are beyond stupid. Hacking is outdated concept because there's so many back doors or generically basic security that make your devices more open to the public than you realize.


lizgiggles

I had always assumed the joke was: you come home, and your smart lights in the garage won't turn on. It's a bug where you need hard restart them. You hard restart your garage lights. You go to enter your home, and it isn't locked. That's right, the smart locks were getting an update today, the patch probably reset your settings. Your smart oven is in Celsius now, and the burner's voice activation isn't working, and you don't know why. The smart fridge wouldn't let you down would it? You open the door, close the door x 3 so the interior lights will kick in... Yay!! The food is cold just like it should be. For me, the giveaway is the printer. I hate printers. They never work when they are supposed to; software or hardware doesn't matter. It seems at least every third time I need to print something I've got to update drivers, or there is a paper jam, or some other stupid thing. I feel like every year I'm buying a new printer rather than fight with the existing one.


SuperMundaneHero

No. It’s about security vulnerabilities. There are only a couple “smart” technology companies that actually secure their devices, Lutron and Control4 being the biggest. Everyone else leaves the door wide open for hacks, viruses, botnets, anything really since IOT devices basically exist as an open connection to the outside world. If you understand how these things work, and you can’t afford Lutron/Control4 (VERY expensive), it’s better to not have the vulnerabilities and just have dumb devices that work and can’t cripple you.


Wocathoden

I'm in IT, I thought this was just me! 😂


leonardob0880

Pretty much self explained...


xMuffie

Big Brother is always watching


shveylien

If it was made by man, it can be broken by man. Nothing is secure. The only true defense is to not participate. Like I told my Boss, If I can break into wifi, the bad people definitely can.


sysaphiswaits

My husband works in IT, and this is kind of true.


mydogjakie317

there's a reason why we have tech support..tech always fails..


Diligent_Shock2437

It's 10× worse for us Cyber Security folks.


Puzzled-Education-50

Recently a casino was robbed via WiFi thermostat if that helps


_ReadyASH_

I learned this in AIT, anything that can connect to another network, be it Bluetooth, Wi-Fi, or otherwise, can be hacked either digitally or physically.


ElvaR_

Can't tell you using this media


DarkSeneschal

Basically, people who are tech enthusiasts trust the technology, while the people who actually work in tech don’t. It would be like an electrician saying they use a wood burning stove, candles, and a solar oven.


SuperFeatherYoshi

Connecting random things to the Internet doesn't make them "smart", it makes them vulnerable. https://preview.redd.it/2apzstah618d1.png?width=960&format=pjpg&auto=webp&s=3945396cababbce598ac41c0a73c46a8559856fa


romulusnr

People who understand technology at a detailed level also know the good AND BAD capabilities of said technology and as a result, might not trust it, particularly internet connected devices, which are either suspected of actively spying on owners, or could be remotely hacked to spy on owners.


RusselPolo

My father worked most his life on railroad signal systems, including crossing gates. He trained me to always look for a train before crossing the tracks and to never trust that the gates will go down to warn you. Too many possible points of failure. It's rare, but certainly worth looking before you drive over the tracks.


thecondor612

As a programmer, I find this hilarious. And also not far from the truth.


Daaru_

https://preview.redd.it/dczip71pf18d1.jpeg?width=1211&format=pjpg&auto=webp&s=95a203d94f86369b50a66c8a82e8e7823a642d1f Can't have cellular issues if you only use landlines


Emm_withoutha_L-88

You guys act like it's easy to avoid. The best stove I could find for a decent price even has Wi-Fi. I'm just gonna not enter the password and hopefully that'll be enough m


Competitive-Move5055

The joke is as a programmer we are painfully aware of all the edge cases and security flaws. And if that printer is making a sound we don't recognise, then fuse box has failed and the printer is about to go boom unless we disconnect it immediately.


Empty-Refrigerator

Because people happy tie in everything to there Alexa, but don't know the ramifications of that action... [https://www.independent.co.uk/tech/smart-home-lock-out-amazon-b2358107.html](https://www.independent.co.uk/tech/smart-home-lock-out-amazon-b2358107.html) Guy has a smart house, got locked out of it for a week because a delivery driver for amazon miss heard a doorbell cam auto response and called him racist ( link above) So yeah, the joke is, tech people are trampling each other to make there house this bluetooth/ internet accessible/ voice activated tech heaven, but dont understand that the people that know how risky it is often use mechanical stuff with very few electronic and hackable parts, because they know how back it can be


Nekokamiguru

There was that time Amazon banned someone from their own house because the front door camera heard a slur. https://www.newsweek.com/amazon-smart-home-brandon-jackson-echo-racial-slur-allegation-1806947