The FBI has issued a security warning about IoT toys.

IoT toys have the potential to violate children’s privacy and safety, given the amount of pertinent information the toys can collect and store, the Federal Bureau of Investigation (FBI) warned this week in an advisory.

The sensors, microphones, data storage capabilities, cameras and other features of Internet of Things (IoT) toys are able to vacuum up extensive details about a child’s name, school, activities and even their physical location.

And if those toys are hacked, criminals could use the stolen information to harm a child, the FBI warned.

What Makes IoT Toys Vulnerable?

Data collected from interactions or conversations between children and toys are typically sent and stored by the manufacturer or developer via a server or a cloud service. In some cases, data are also collected by third party companies that manage the voice recognition software used in the toys.

Voice recordings, toy Web application passwords, home addresses, WiFi information, and sensitive personal data could be exposed if the security of the data is not sufficiently protected with the proper use of digital certificates and encryption when it is being transmitted or stored.

Smart toys connect to the Internet either directly, through WiFi to an Internet connected wireless access point; or indirectly, via Bluetooth to an Android or iOS device that is connected to the Internet.
Key factors affecting the user’s security include: the cyber security features, the toy’s partner applications and the WiFi network through which the toy connects.

Superior communications connections - where data is encrypted between the toy, WiFi access points, and Internet servers that store data or interact with the toy - are crucial to mitigate the risk of hackers exploiting the toy or eavesdropping on conversations or audio messages.

The FBI notes that Bluetooth connected toys that do not have authentication requirements (such as PINs or passwords) pose risks for unauthorized access, enabling criminals to communicate with children.

What You Can Do To Protect Your Child

• Choose IoT toys very carefully by doing lots of research. Look for any known reported security issues regarding a toy.
• Find out if a toy can receive firmware or software updates and security patches - and ensure the toy is running on the latest version.
• Closely monitor your child’s activities with each toy through the toy’s parent application, if such a capability exists.
• Ensure the toy is turned off when it is not in use.
• Create a strong and unique login password when establishing a user account. For extra strong passwords, use lower and upper case letters, numbers and special characters.
• Provide only what is minimally required for creating a user account.

Stay at Starwood hotels regularly? You will soon be able to use your smartphone to gain access to your room.

Forget losing your hotel key card in the small hours of the morning and facing a night sleeping in the corridor - thanks to a new Bluetooth connected app, guests at Starwood Hotels will soon be able to access their room using their smartphone.

Starwood Hotels, owner of more than 1,200 properties across the world, has announced the rollout of the feature for 10 of its hotels, with keyless access expected to roll out across all Aloft, Element and W Hotels in 2015.

The keyless entry works on Bluetooth LE enabled iPhones and Android smartphones thanks to the company's free SPG App. Guests simply sign up through the app, and when they checkin for their booking they will have the option to use SPG Keyless to access their room. Getting into the room is as simple as holding the phone up to the Bluetooth panel on the door and waiting for the green light.

The app also allows guests to view the details of their stay and receive push notifications on the status of their room, such as information on upgrades. But the biggest bonus is the time saved - visitors will be able to bypass the front desk when they get to their hotel, taking control of everything through the app.

Starwood Hotels promises advanced security, partnering with smart lock company Assa Abloy to ensure that specific room keys only work on specific phones and allowing digital keys to be wiped if a phone is lost.

Starwood's move is part of a worldwide shift towards smart hotel technology, with Hilton Hotels rolling out smartphone technology that allows users to enter their room without a key and even choose their room off the floor plan before they arrive.

Source: CNET

Did you know, in many states, it is illegal to talk on your cell phone while driving?

Did you know, in many states, it is illegal to talk on your cell phone while driving? It is, however, legal (in most states) to use a Bluetooth headset.

Check out our newly stocked line of Apple and Samsung Bluetooth headsets below. For as little as $29.99, you can drive safely...and legally!

View details for Samsung Bluetooth device.

View details for Apple Bluetooth device.

*These devices will work with any Bluetooth enabled phone - Apple, Samsung, Nokia, Blackberry, Motorola, HTC, Sony, etc.

**We are not lawyers here at IES; we're technology experts! Of course, laws vary from state to state. Please check into your local laws before using any wireless device while driving.

This new light bulb will not only keep your room bright, but it will fill it with all your Bluetooth music.

The AwoX StriimLight B-10 sounds crazier than it actually is. It’s a light bulb, and it’s also a Bluetooth speaker. You screw it in, pair it to a device, and stream music to an 8W LED light bulb. The light socket powers both the speaker and the bulb, so the latter has to be screwed into a socket for the speaker to work.

It produces bright and warm-looking 3000K light that resembles the output of a fluorescent tube. It’ll screw into any E27 Edison mount.

As you’d expect, the speaker is not very good. A single 2-inch, 10W mono speaker in the middle of the LED lamp kicks out mediocre, bass-bereft audio. But those shortcomings are forgivable as the StriimLight leans heavily on gestalt principles.

Pairing it to a device is a simple process: You turn the bulb on, it beeps twice when it’s discoverable, and then you find the “StriimLIGHT” on your device’s pairing menu. Turning the lamp on and off restarts the discovery process if you have trouble finding the bulb in its Bluetooth menu; it’s basically a hard reboot of the bulb.

One little perk is that the StriimLight comes with its own remote control. The included plastic watch-battery-powered clicker is made of plastic, and lets you turn the light on and off, turn the speaker volume up and down, and mute the audio entirely.

At $100, the StriimLight may still be too expensive - at least until the audio quality is fixed. Available at awox.com/EN/striimlight.html.

Above: AwoX StriimLight B-10

Use Bluetooth? Protect yourself from hacking scams.

Cell phone users are increasingly turning to Bluetooth technology to talk - hands free - on their phones. But as this high tech tool gains popularity in the US and Canada, scammers are finding ways to exploit it.

How the Scam Works:   
Scammers use specialized software to intercept your Bluetooth signal and hack into your device. It’s called “bluebugging.”  Doing this gives them access to all your texts, contacts, photos, call history… everything on your phone.
Scammers sometimes use hacked phones to make long distance calls. Other times, they access your private text messages or photos. But unless you are a celebrity, government official or high-powered corporate executive, you are unlikely to be a target.
Recently, the newest scheme is for scammers to set up a pay-per-minute phone number. Then, they hang out in a busy area and hack into phones. Scammers use the phones to dial the number and rack up charges by the minute.

Tips to Ensure Your Bluetooth Isn’t Hacked: 

• Always use a minimum of eight characters in your PIN. The longer your code, the more difficult it is to crack.
• Switch Bluetooth into “not discoverable” mode when you aren’t using it. If you make a call from your car, be sure to switch it off when you get out. Crowded public places are top spots for hackers.
• Don’t accept pairing requests from unknown parties. If you happen to pair your phone with a hacker’s computer, then all your data will be at risk.
• When pairing devices for the first time, do so at home or in the office.
• Make sure you download and install regular security updates. Device manufactures will release updates to address threats and correct weaknesses.

For More Information
Check out Bluetooth.com for tips on using products with Bluetooth technology. Also, see your cellphone manufacturer’s website for more advice.

Source: BBB