article thumbnail

IoT Unravelled Part 3: Security

Troy Hunt

For some reason, the Shelly on my garage door is making a DNS request for api.shelly.cloud once every second! The vulnerability is the result of weak encryption used by TP-Link. The growth has been driven by the free and easy availability of certificates, largely due to the emergence of Let's Encrypt in 2016.

IoT 357
article thumbnail

Is India's Aadhaar System Really "Hack-Proof"? Assessing a Publicly Observable Security Posture

Troy Hunt

We are rapidly approaching a "secure by default" web and the green padlock is becoming the norm ( about two thirds of all browser traffic is now encrypted ). A great resource for getting a quick snapshot of how a site implements their SSL / TLS / HTTPS ("encryption of traffic", for the masses) is SSL Labs.

Hacking 279