Watches are a security threat
 

The maker of expensive printer ink is warning that smartwatches are a huge security threat.

HP Security found that many of the most popular wearable gizmos carry major security flaws thanks to their increasing connectivity to the Internet of Things.

All the ten gizmos tested by Fortify, HP Security’s application provider, contained “significant vulnerabilities”.

These included a lack of proper authorisation and authentication. When connected to an insecure test mobile device, three in ten of the gizmos were vulnerable to ‘account harvesting.’ This was thanks to a combination of weak password policy, lack of account lockout, and user enumeration.

Seventy percent of the smartwatches tested were also found to come up short on protecting firmware updates, including transmitting firmware updates without encryption and without encrypting the update files.

Three of the gizmos used cloud-based web interfaces that left them at risk of having password or data stolen by hackers using reset password forms.

http://www.techeye.net/business/watc...ecurity-threat