<story><title>Two Billion Records Exposed in &apos;Smart Home&apos; Breach</title><url>https://secalerts.co/article/two-billion-records-exposed-in-smart-home-breach/5e204721</url></story><parent_chain></parent_chain><comment><author>m34</author><text>(tech) people tend to laugh at me&amp;#x2F;pull the tinfoil hat card for putting my dlink&amp;#x2F;iot stuff behind a very restrictive, dedicated, iptables filtered, hostapd based custom network running on my pi zero w that isn’t allowed to talk to the home network or internet at all.&lt;p&gt;As mentioned by others, I guess it really needs severe identity theft&amp;#x2F;abuse with vital services until people realize that today‘s IoT &amp;#x27;plug &amp;amp; play&amp;#x27; is worse than than the level of &amp;#x27;plug &amp;amp; pray&amp;#x27; we‘ve seen in the early PCI&amp;#x2F;USB&amp;#x2F;Win98 era (that only impacted your local device functionality).</text></comment>
<story><title>Two Billion Records Exposed in &apos;Smart Home&apos; Breach</title><url>https://secalerts.co/article/two-billion-records-exposed-in-smart-home-breach/5e204721</url></story><parent_chain></parent_chain><comment><author>OJFord</author><text>&amp;gt; a misconfigured and Internet-facing Elasticsearch database without a password.&amp;quot; If this wasn&amp;#x27;t bad enough, a Kibana web-based app, there to make navigating through the data easier, had no password protection.&lt;p&gt;That&amp;#x27;s not even really &amp;#x27;exposed in breach&amp;#x27;, that&amp;#x27;s just &amp;#x27;exposed&amp;#x27;.</text></comment>