[NFBofSC] FW: [tech-vi Announce List] Security Saturday: Is your Smartwatch Secure, or Could It Make You a Target for Cybercriminals?

Sun Jan 23 00:52:45 UTC 2022

From: tech-vi at groups.io <tech-vi at groups.io> On Behalf Of David Goldfield
Sent: Saturday, January 22, 2022 6:16 PM
To: tech-vi at groups.io
Subject: [tech-vi Announce List] Security Saturday: Is your Smartwatch
Secure, or Could It Make You a Target for Cybercriminals?

WhatIsMyIPAddress - Tuesday, January 11, 2022 at 8:45 AM

Is your Smartwatch Secure, or Could It Make You a Target for Cybercriminals?

Unable to fetch full text content for this article, please use the link to
the web view to read the entire article.

Smartwatches became all the rage with tech-savvy consumers when they hit the
market in 2015. With all the high-tech features of a smaller smartphone
right on your wrist, and even some new bells and whistles, what could go
wrong, right?

Unfortunately, a lot. But that doesn’t mean you have to ditch your favorite
new gadget. But, as with any modern technology, it’s best to understand the
security risks to protect yourself from vulnerabilities that open the door
to cybercriminals. 

After all, roughly one-in-five U.S. adults (21%) say they regularly wear a
smartwatch or wearable fitness tracker, according to a Pew Research Center
survey
<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.pewres
earch.org%2Ffact-tank%2F2020%2F01%2F09%2Fabout-one-in-five-americans-use-a-s
mart-watch-or-fitness-tracker%2F&data=04%7C01%7C%7C00a86f1b7221413e55d408d9d
6485454%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637776428415592708%7CUn
known%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJX
VCI6Mn0%3D%7C3000&sdata=iX0xbYXb7Lnrb1pLpwfQ7X%2BSLLuymZgc7dgCrnZgZGA%3D&res
erved=0> conducted in June 2019.

What do smartwatch fans love about them? They are undoubtedly incredibly
convenient and useful in dozens of ways. If you don’t enjoy pulling your
phone out constantly but you want to stay on top of calendar events, texts,
emails, and phone calls. 

Smartwatches are great for checking notifications. You can pay for a
manicure, a lawnmower at Home Depot, or basically anything else with
contactless payment right from your wrist. If you misplace your phone, your
watch is your new best friend, sending a signal so you can find it. You can
also:

*	Play music
*	Listen to podcasts
*	Record meetings
*	Dictate memos
*	Navigate around an unfamiliar city
*	Track health data

Tracking health data can be great for monitoring your steps, miles
walked/run, workouts, heart rate, and it can even be life-saving in a
crisis. Read more in-depth about that in our article, How Mobile Internet
Tech Can Save Your Life
<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwhatismyip
address.com%2Fhow-mobile-internet-tech-can-save-your-life&data=04%7C01%7C%7C
00a86f1b7221413e55d408d9d6485454%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%
7C637776428415592708%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2l
uMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=2W%2FsN4p3Wno3eLs4v2%2FbZtC
zRtTviWwLaC7yEhJfn%2FA%3D&reserved=0> . 

Wearables can save your life. As the Boston Globe
<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.boston
globe.com%2F2021%2F08%2F23%2Fbusiness%2Fhow-smart-watch-could-save-your-life
%2F&data=04%7C01%7C%7C00a86f1b7221413e55d408d9d6485454%7C84df9e7fe9f640afb43
5aaaaaaaaaaaa%7C1%7C0%7C637776428415592708%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiM
C4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=ZMnuE
%2F64FXOfTq71zfg4GZ5H0KVS4oFmlgydVWDAtAI%3D&reserved=0>  points out, a man
was rescued by his watch during a cycling excursion in Martha’s Vineyard. He
had no recollection of calling 911 because he didn’t. The watch did. 

Smartwatches have gone through several iterations since they first burst on
the scene. But as with any technology, there are bad actors out there who
are looking for an angle to get their hands on your precious personal data. 

Let’s look at some of the smartwatch security issues you should be aware of
as well as precautionary measures you need to take to prevent hacking and
identity theft. 

Security issues for Smartwatches

Smartwatches collect a ton of personal data about you

Whether it’s health information, financial data, or location data, you may
have provided more information than you realize, depending on what apps
you’ve installed. 

Your data may be sent to many third parties

As Norton Antivirus
<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fus.norton.
com%2Finternetsecurity-iot-how-to-protect-your-connected-wearables.html&data
=04%7C01%7C%7C00a86f1b7221413e55d408d9d6485454%7C84df9e7fe9f640afb435aaaaaaa
aaaaa%7C1%7C0%7C637776428415592708%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwM
DAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=XhoYRYQssqlAq
BzQnJuUHfXPCZ6vyeTYplyd%2FQShvBc%3D&reserved=0> ’ site points out,
smartwatches — whether they are Apple or Android devices — come with privacy
policies. Reading the policy will tell you how much or how little
information is shared.

For smartwatch apps, it’s a good idea to not give a lot of permissions. For
instance, some apps may want to access account information and your
geographical location. This would be valuable information for cybercriminals
if they’ve managed to infect your smartwatch with spyware.

Smartwatches control smart-home tech

You can set your watch up to control smart-home technology. For instance,
you may be able to use your smartwatch to unlock your front door, which is a
great convenience. But have you thought about what could happen if your
watch is lost or stolen?

Norton points out smartwatch manufacturers offer security settings that can
help protect you in the case of theft. For instance, a security setting may
prevent your smartwatch from being paired with any device you haven’t
approved. It’s wise to make sure you’ve enabled such protection in your
security settings.

Smartwatches create vulnerabilities on business networks

Any network that your phone is connected to may also be linked to your
watch. This opens up not only your personal information but also sensitive
work documents as well. 

The solution? Keep smart tech on a guest network.

Health data is shared

Yes, it’s great when the doctor is alerted that you’ve fallen and may need
assistance. However, concerns have been raised over who can and should have
access to this health data
<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgizmodo.co
m%2Fguys-fitbit-started-profiting-off-health-data-long-bef-1839940074&data=0
4%7C01%7C%7C00a86f1b7221413e55d408d9d6485454%7C84df9e7fe9f640afb435aaaaaaaaa
aaa%7C1%7C0%7C637776428415592708%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDA
iLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=O4I1HT7kJAaJDib
25XYazF%2FtSDY0BxWSUY3pFIAj60Q%3D&reserved=0> . Military analysts have also
expressed concern about how third parties can use the data to find out where
there is an American military presence
<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.wired.
com%2Fstory%2Fstrava-heat-map-military-bases-fitness-trackers-privacy%2F&dat
a=04%7C01%7C%7C00a86f1b7221413e55d408d9d6485454%7C84df9e7fe9f640afb435aaaaaa
aaaaaa%7C1%7C0%7C637776428415592708%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAw
MDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=e2WZ5%2BsZqo
eCOuhJZGnbqI8A4pIvmn098cEs%2BJ498BI%3D&reserved=0> .

Phishing 

When you download a fraudulent app and enter any personal info into it, you
open yourself up to phishing scams. 

Fake apps will ask you to log into your account, and then a form captures
your credentials, opening you up to identity theft and fraud. Sticking to
the established Google and Apple app stores is recommended, though they are
not 100% failsafe. 

Kids are at risk

According to Wired Magazine
<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.wired.
com%2Fstory%2Fkid-smartwatch-security-vulnerabilities%2F&data=04%7C01%7C%7C0
0a86f1b7221413e55d408d9d6485454%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7
C637776428415592708%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2lu
MzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=hBLecYEqZm%2FdvekSOVgtWTlsKa
EvZrJbthTTs6eqxxs%3D&reserved=0> , Kids’ smartwatches are a security
nightmare, despite years of warnings. In a paper
<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.hb.fh-
muenster.de%2Fopus4%2Ffrontdoor%2Fdeliver%2Findex%2FdocId%2F12354%2Ffile%2FS
aatjohann_et_al-2020-STALK.pdf&data=04%7C01%7C%7C00a86f1b7221413e55d408d9d64
85454%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637776428415592708%7CUnkn
own%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVC
I6Mn0%3D%7C3000&sdata=5CVxvKh48MCzGoYLGLwXTOwdGK%2FLR75MoSTbFUaeUtU%3D&reser
ved=0>  published in Germany, tests were run on the security of six brands
of smartwatches marketed for kids. 

They’re designed to send and receive voice and text messages, and let
parents track their child’s location from a smartphone app. The researchers
found that hackers could abuse those features to track a target child’s
location using the watch’s GPS in five out of the six brands of watch they
tested. 

Several of the watches had even more severe vulnerabilities, allowing
hackers to send voice and text messages to children that appear to come from
their parents, to intercept communications between parents and children, and
even to record audio from a child’s surroundings to eavesdrop on them. 

This is all pretty alarming when you think of what could happen to children.
The Münster researchers shared their findings with the smartwatch companies
in April, but say that several of the bugs they disclosed have yet to be
fixed.

How to ensure your smartwatch is secure

The best way to start being proactive in protecting yourself is to make sure
you utilize your existing smartwatch privacy features. 

Block unauthorized pairing. Take advantage of the activation lock setting on
your smartwatch. If someone steals your watch, this safety feature will
prevent criminals from getting at your valuable personal information. 

Make sure the watch you buy has two-factor authentication that uses a
follow-up confirmation on one of your devices. This can be a pretty strong
deterrent for hackers and thieves to bypass.

Activate all the protection features your smartwatch offers, including the
PIN you choose to unlock the device, as well as a lock feature if you’re too
far from your phone.

Secure your paired smartphone

Since your devices talk to each other, smartphone safety
<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwhatismyip
address.com%2Fsmartphone-security&data=04%7C01%7C%7C00a86f1b7221413e55d408d9
d6485454%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637776428415748929%7CU
nknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJ
XVCI6Mn0%3D%7C3000&sdata=ai8%2BhxoAwQqSbGI%2F4X6dw133WVXLW5X7XQ4Fp8d8s%2BQ%3
D&reserved=0>  is essential. The data exchange between devices may leave you
vulnerable to hacks, so it’s more important than ever to be vigilant about
guarding information when it comes to social media apps, banking apps, and
any other kind of personal data.

Keep your device up to date

Be sure to get your phone’s most current updates. Operating systems (Windows
for PCs, macOS for Apple), are updated often, between new versions. Phones
update their operating system as well, especially to close up leaks that
hackers may have discovered. You can get an update from your phone directly,
or you can sync your phone with your computer.

Use a virtual private network connection (VPN) 

One expert said, “a VPN is like a personal bodyguard for the Internet.” Why?

A VPN allows you to encrypt your internet connection. For a deeper dive,
read our Why Use a VPN article here
<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwhatismyip
address.com%2Fwhy-vpn&data=04%7C01%7C%7C00a86f1b7221413e55d408d9d6485454%7C8
4df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637776428415748929%7CUnknown%7CTWF
pbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%
7C3000&sdata=88%2FE4MB4SQiYyYuIoXS%2FJrdm90aukiDvNOfBO5xKbIg%3D&reserved=0>
. 

The convenience of smartwatches will likely drive continued demand. But it’s
a good idea to understand the risks going in so you can take steps to help
protect your information.

The post Is your Smartwatch Secure, or Could It Make You a Target for
Cybercriminals?
<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwhatismyip
address.com%2Fis-your-smartwatch-secure-or-could-it-make-you-a-target-for-cy
bercriminals&data=04%7C01%7C%7C00a86f1b7221413e55d408d9d6485454%7C84df9e7fe9
f640afb435aaaaaaaaaaaa%7C1%7C0%7C637776428415748929%7CUnknown%7CTWFpbGZsb3d8
eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sd
ata=KxWx4q%2BnUTmdfb4Bmg1NmIOXjMdcB%2Be5sKN6IXyBkXc%3D&reserved=0>  appeared
first on WhatIsMyIPAddress
<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwhatismyip
address.com%2F&data=04%7C01%7C%7C00a86f1b7221413e55d408d9d6485454%7C84df9e7f
e9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637776428415748929%7CUnknown%7CTWFpbGZsb3
d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&
sdata=6mmbCpmlTPs%2BOqzqe1rTJzhWJ%2BsrBFEWs1LDGOk3pXs%3D&reserved=0> .

https://whatismyipaddress.com/is-your-smartwatch-secure-or-could-it-make-you
-a-target-for-cybercriminals
<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwhatismyip
address.com%2Fis-your-smartwatch-secure-or-could-it-make-you-a-target-for-cy
bercriminals&data=04%7C01%7C%7C00a86f1b7221413e55d408d9d6485454%7C84df9e7fe9
f640afb435aaaaaaaaaaaa%7C1%7C0%7C637776428415748929%7CUnknown%7CTWFpbGZsb3d8
eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sd
ata=KxWx4q%2BnUTmdfb4Bmg1NmIOXjMdcB%2Be5sKN6IXyBkXc%3D&reserved=0> 

     David Goldfield 

Assistive Technology Specialist

Feel free to visit my Web site

WWW.DavidGoldfield.info <http://WWW.DavidGoldfield.info> 

_._,_._,_

  _____  

Groups.io Links:

You receive all messages sent to this group. 

View/Reply Online (#1585) <https://groups.io/g/tech-vi/message/1585>  |
Reply To Group
<mailto:tech-vi at groups.io?subject=Re:%20%5Btech-vi%20Announce%20List%5D%20Se
curity%20Saturday%3A%20Is%20your%20Smartwatch%20Secure%2C%20or%20Could%20It%
20Make%20You%20a%20Target%20for%20Cybercriminals%3F>  | Reply To Sender
<mailto:david.goldfield at outlook.com?subject=Private:%20Re:%20%5Btech-vi%20An
nounce%20List%5D%20Security%20Saturday%3A%20Is%20your%20Smartwatch%20Secure%
2C%20or%20Could%20It%20Make%20You%20a%20Target%20for%20Cybercriminals%3F>  |
Mute This Topic <https://groups.io/mt/88615346/318502>  | New Topic
<https://groups.io/g/tech-vi/post> 
Your Subscription <https://groups.io/g/tech-vi/editsub/318502>  | Contact
Group Owner <mailto:tech-vi+owner at groups.io>  | Unsubscribe
<https://groups.io/g/tech-vi/leave/11013341/318502/1820159643/xyzzy>
[floza58 at bellsouth.net]

_._,_._,_

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://nfbnet.org/pipermail/nfbofsc_nfbnet.org/attachments/20220122/9b1c2bdf/attachment.html>