High-Tech Toilet Vulnerable to Easy Security Hack
Those people who paid more than $5,000 for a high-tech 'smart' toilet could be in for a shock. A major design flaw means it's easy for hackers to cause annoyance, irritation -- even financial loss.
The Satis toilet boasts a wide range of computerized features, such as an automated bidet and air drier and built-in speakers that play a personalized selection of music. The toilet can even be programmed to release a soothing fragrance.
Owners control these features using a special app for Android devices (though it can also be controlled through buttons on the toilet itself). The app offers additional functions, such as tracking your daily usage of the toilet -- something that could be useful for monitoring certain health conditions. (Source: bbc.co.uk)
Predictable Pin Produces Potty Problems
However, researchers at security firm Trustwave say they've found a serious design flaw.
The app works by sending out a Bluetooth signal through a user's smartphone. Normally, when two Bluetooth devices try to connect, they need a common four-digit PIN code to 'pair' and begin exchanging information.
It turns out the Satis PIN code is hardwired to '0000' and cannot be changed by the user. This means anyone with an Android device can install the app, connect to the toilet, and then control it. (Source: trustwave.com)
This could allow someone to carry out rude and annoying pranks -- such as remotely closing the lid or activating the bidet spray.
Toilet Hacking Can Mean Huge Water Bills
At worst, it could allow a hacker to repeatedly flush the toilet -- something that would not only be a major annoyance, but could result in an expensive utility bill.
That said, hacking through the Satis' Bluetooth connection does require a physical presence. That means an attack would require the hacker be within 60 to 100 feet of the toilet.
Trustwave says that, since mid-June, it has made three attempts to inform Satis about the flaw. However, the firm hasn't responded to Trustwave, nor has it publicly commented on the issue.
Most popular articles
- Which Processor is Better: Intel or AMD? - Explained
- How to Prevent Ransomware in 2018 - 10 Steps
- 5 Best Anti Ransomware Software Free
- How to Fix: Computer / Network Infected with Ransomware (10 Steps)
- How to Fix: Your Computer is Infected, Call This Number (Scam)
- Scammed by Informatico Experts? Here's What to Do
- Scammed by Smart PC Experts? Here's What to Do
- Scammed by Right PC Experts? Here's What to Do
- Scammed by PC / Web Network Experts? Here's What to Do
- How to Fix: Windows Update Won't Update
- Explained: Do I need a VPN? Are VPNs Safe for Online Banking?
- Explained: VPN vs Proxy; What's the Difference?
- Explained: Difference Between VPN Server and VPN (Service)
- Forgot Password? How to: Reset Any Password: Windows Vista, 7, 8, 10
- How to: Use a Firewall to Block Full Screen Ads on Android
- Explained: Absolute Best way to Limit Data on Android
- Explained: Difference Between Dark Web, Deep Net, Darknet and More
- Explained: If I Reset Windows 10 will it Remove Malware?
![](/graphics/dennisfaas.jpg)
My name is Dennis Faas and I am a senior systems administrator and IT technical analyst specializing in cyber crimes (sextortion / blackmail / tech support scams) with over 20 years experience; I also run this website! If you need technical assistance , I can help. Click here to email me now; optionally, you can review my resume here. You can also read how I can fix your computer over the Internet (also includes user reviews).
We are BBB Accredited
![](https://www.infopackets.com/graphics/bbb.png)
We are BBB accredited (A+ rating), celebrating 21 years of excellence! Click to view our rating on the BBB.