Month: September 2019

• 

  The Sonos Move. [credit: Jeff Dunn ]

Sonos on Thursday announced its first portable Bluetooth speaker: the Sonos Move.

The new device will be available on September 24 for $399, with pre-orders beginning on Thursday.

Here’s the short pitch: the Move is like a chunkier Sonos One when connected to Wi-Fi in the house, but it has Bluetooth audio functionality and a weather-resistant design that allows it to stream audio outdoors. It’s “portable” in the more literal sense: the speaker is too large (9.44×6.29×4.96 inches, or 23.9×15.9×12.6cm) and heavy (6.61 lbs, or about 3kg) to comfortably fit in a backpack, but a cutout around its back functions as a carrying handle.

Enlarge (credit: Shenzhen i365 Tech)

An estimated 600,000 GPS trackers for monitoring the location of kids, seniors, and pets contain vulnerabilities that open users up to a host of creepy attacks, researchers from security firm Avast have found.

The $25 to $50 devices are small enough to wear on a necklace or stash in a pocket or car dash compartment. Many also include cameras and microphones. They’re marketed on Amazon and other online stores as inexpensive ways to help keep kids, seniors, and pets safe. Ignoring the ethics of attaching a spying device to the people we love, there’s another reason for skepticism. Vulnerabilities in the T8 Mini GPS Tracker Locator and almost 30 similar model brands from the same manufacturer, Shenzhen i365 Tech, make users vulnerable to eavesdropping, spying, and spoofing attacks that falsify users’ true location.

Researchers at Avast Threat Labs found that ID numbers assigned to each device were based on its International Mobile Equipment Identity, or IMEI. Even worse, during manufacturing, devices were assigned precisely the same default password of 123456. The design allowed the researchers to find more than 600,000 devices actively being used in the wild with that password. As if that wasn’t bad enough, the devices transmitted all data in plaintext using commands that were easy to reverse engineer.