LIFX fixes light bulb security flaw that stored unencrypted Wi-Fi credentials

Affected LIFX bulbs received firmware and app updates that encrypted exposed data

LIFX bulb

Post-obit a written report before this week that some LIFX smart bulbs stored Wi-Fi credentials in an unencrypted state, the company says it has fixed the issue.

LIFX worked with Limited Results, which discovered the Wi-Fi vulnerability along with two other security issues, to gear up the flaws after the visitor was made enlightened of the problem in 2018.

It pushed firmware and app updates to its Mini bulbs and users in quaternary-quarter of 2018 to fix the flaw.

Forth with the exposed Wi-Fi credentials, Express Results found the light bulb stored unencrypted RSA keys, which are typically used when securing SSL and TSL internet transmissions. Finally, the LIFX Mini bulbs had no firmware-level security to forbid malicious actors from accessing this data if they tampered with the device.

Following the firmware and app updates, both Wi-Fi credentials and RSA keys are encrypted. Further, LIFX has introduced extra security settings to the hardware.

Customers tin update their lights using the companion app by going into 'Settings' and borer 'Update firmware.'

Additionally, LIFX says customers can change their Wi-Fi credentials, which would return the exposed information irrelevant. The company besides recommends doing this as regularly equally is convenient to ensure your network is secure.

On top of this, the company released a weblog post detailing some basic steps for ensuring network security, such every bit what to name your Wi-Fi network and what countersign to use.

You can read more near LIFX work to secure its products hither.

Source: LIFX