{"id":17835,"date":"2020-02-27T06:30:12","date_gmt":"2020-02-27T14:30:12","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2020\/02\/27\/news-11568\/"},"modified":"2020-02-27T06:30:12","modified_gmt":"2020-02-27T14:30:12","slug":"news-11568","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2020\/02\/27\/news-11568\/","title":{"rendered":"How and why you need HomeKit-secured smart homes"},"content":{"rendered":"

<\/p>\n

Credit to Author: Jonny Evans| Date: Thu, 27 Feb 2020 04:40:00 -0800<\/strong><\/p>\n

Once upon a time the Internet was amazing, enabling niche interests and connecting people. Apple\u2019s iMac was the epitome of the era, while the iPhone became the prophet of change.<\/p>\n

These days hackers break into home networks using our routers and smart home devices, which is why everyone must learn how to use HomeKit-secured routers<\/a> to keep their connected homes safe.<\/p>\n

Apple announced HomeKit-secured routers at WWDC 2019<\/a>. The first few devices to support the tech recently began to reach market, including options from Linksys<\/a> and (now) Amazon\u2019s Eero routers<\/a>.<\/p>\n

HomeKit-secured routers provide an additional level of defence between your connected smart home devices and the outside world.<\/p>\n

This is of benefit because by putting this \u2018wall\u2019 in place, your smart devices become a little harder to hack.<\/p>\n

You don\u2019t want criminals taking control of your smart locks, smart baby camera or smart anything, really, do you? You certainly won\u2019t want them to attack your HomeKit devices in order to subvert your home network, or monitoring what your HomeKit devices do in order to figure out when your house is empty and vulnerable.<\/p>\n

HomeKit-secured routers let you protect each of your HomeKit devices with one of three levels of protection.<\/p>\n

These include:<\/p>\n

Restrict to Home:<\/strong><\/em> The toughest setting, this restricts your devices so that they “can interact only with HomeKit through your Apple devices.” This means they have no independent access to the internet and means you must manually download software updates. But this also means no one can get to those devices unless they take control of your device.<\/p>\n

Automatic:<\/strong> <\/em>The default option allows for limited internet access with connections restricted to those \u201crecommended by its manufacturer\u201d.<\/p>\n

No Restriction:<\/strong><\/em> This is what it says on the can. It is the least secure option that provides no protection at all. I wouldn\u2019t recommend it unless you have a pressing need for it.<\/p>\n

HomeKit-secured routers also provide iOS or iPadOS apps which you can get from the App Store and will require when setting up these systems.<\/p>\n

First, download and install the relevant app for you router, open it and follow the manufacturer\u2019s set-up instructions.<\/p>\n

Because most smart home devices are actually pretty dumb, the next stage of the process is slightly annoying but necessary.<\/p>\n

It basically comes down to switching all your HomeKit-enabled products off and switching them on again, which I suspect (though Apple didn\u2019t say<\/a>) is required to reset the (dumb) low-power processors inside these things.<\/p>\n

It means you must remove any existing accessories you\u2019ve already set up, which is a shame as doing so also means all the data, including accessories, scenes, automations and people you\u2019ve invited to control your home will be deleted.<\/p>\n

You\u2019ll have to set them all up for your preferences once again.<\/p>\n

There are two ways to remove the devices: You can remove individual accessories from your Home app or delete your entire home set-up in the app in order to reconfigure the whole thing from scratch.<\/p>\n

Once you\u2019ve removed the accessories (or your home setup) you\u2019ll need to reset you accessories **<\/strong>.<\/p>\n

** This is likely to be a tedious process<\/strong>, as you will need to find the tiny reset button that may exist on each of your HomeKit devices.\u00a0If you can\u2019t find that button, you\u2019ll need to read the manual, spend half a day trying to find out more information on the manufacturer\u2019s website, or contact the manufacturer to begin negotiating for help with its customer support service. Good luck with that.<\/em><\/p>\n

As you add HomeKit devices to your home setup, you\u2019ll be given the opportunity to define access privileges, which works like this:<\/p>\n

You now know how to set this system up, but given that doing so may be a little time-consuming, it\u2019s probably worth reprising why it\u2019s important to take on the task.<\/p>\n

If properly configured, most routers are smart enough to distinguish between potentially dangerous incoming traffic and traffic from (assumed to be authorized) systems you have installed in your home.<\/p>\n

However, not every device is as well secured as you might think.<\/p>\n

Many of the early generation smart home devices shipped with weak security, while some may even carry malware already inside the chip.<\/p>\n

In the former case, an attacker who can find the device may want to use it to help them climb inside your home network. In the latter scenario, that trusted device may be sharing all kinds of information about you with people you know nothing about.<\/p>\n

Spooky, huh?<\/p>\n

That’s why limiting your smart home devices in terms of their access to the internet is the smart thing to do. If they can\u2019t contact people, or can only contact a very limited sub-set of people, then your are a little safer. If they can\u2019t be found, you\u2019re safer too.<\/p>\n

So, is this really something to worry about?<\/p>\n

Well, clearly Apple thinks it is, and it is telling that Amazon seems to agree, given addition of HomeKit support to its Eero routers.<\/p>\n

It\u2019s also important to consider that pretty much the entire smart home device industry is now working with Apple to develop more secure, more compatible connectivity standard<\/a>.<\/p>\n

\u201cThe project is built around a shared belief that smart home devices should be secure, reliable, and seamless to use,\u201d the partners said announcing this.<\/p>\n

What are they concerned about? It\u2019s possible they are also aware of Kaspersky research<\/a>\u00a0claims that attacks against smart home devices climbed by 700% across 2018-19.<\/p>\n

So, while the need to rebuild your entire smart home setup in order to use HomeKit-secured routers may seem frustrating, the added security you get justifies the work.<\/p>\n

Of course, many Computerworld<\/em> readers are experts and may already have found their own ways to improve their own smart home (or office) security. That’s great. However, for many the fact that Apple now offers such tools makes such protection available to them, probably for the first time.<\/p>\n

With this in mind, and the scale of the evident threat model, I\u2019d urge anyone with a HomeKit set-up to begin taking steps to implement this kind of protection.<\/p>\n

In an ideal world, cable and broadband suppliers would upgrade the routers they supply with support for HomeKit security as a matter of urgency — and it may be worth customers applying pressure to make sure they do. Why not contact your provider and ask about this?<\/p>\n

Please follow me on\u00a0Twitter<\/a>, or join me in the\u00a0AppleHolic\u2019s bar & grill<\/a>\u00a0and\u00a0Apple Discussions<\/a>\u00a0groups on MeWe.<\/em><\/p>\n

http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

<\/p>\n

Credit to Author: Jonny Evans| Date: Thu, 27 Feb 2020 04:40:00 -0800<\/strong><\/p>\n

\n
\n

Once upon a time the Internet was amazing, enabling niche interests and connecting people. Apple\u2019s iMac was the epitome of the era, while the iPhone became the prophet of change.<\/p>\n

What is HomeKit-secured and why should you use it?<\/strong><\/h2>\n

These days hackers break into home networks using our routers and smart home devices, which is why everyone must learn how to use HomeKit-secured routers<\/a> to keep their connected homes safe.<\/p>\n

Apple announced HomeKit-secured routers at WWDC 2019<\/a>. The first few devices to support the tech recently began to reach market, including options from Linksys<\/a> and (now) Amazon\u2019s Eero routers<\/a>.<\/p>\n

To read this article in full, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[2211,11081,10480,10554,714],"class_list":["post-17835","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-apple","tag-home-tech","tag-ios","tag-mobile","tag-security"],"_links":{"self":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/17835","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=17835"}],"version-history":[{"count":0,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/17835\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=17835"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=17835"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=17835"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}