By Jeremy Kirk
What if you could ride a bike up to a traffic light and have it turn green? That’s already possible in some cities in the Netherlands that have installed IoT traffic lights.
But security researchers have already uncovered problems. The traffic lights interact with an app on a rider’s phone. During a recent presentation at the Def Con security conference, researchers with the security firm Zolder showed how they could remotely trigger the lights without being near one.
Co-founder of Zolder, Rik van Duijn says his team, which included Wesley Neelen, reverse engineered applications that developers are making that are compatible with the traffic lights. It was trial and error, but they eventually figured out how to replicate sending the correct commands from afar.
“There’s no real authentication on who or where you are,” van Duijn says. “The service relies on the input you give, and that’s actually the reason this whole research project started.”
https://www.govinfosecurity.com
