It’s being reported that only a month after launching the Amazon Key, security experts are warning a flaw in the devices mode of operation could allow for rogue deliverymen entering homes without it ever being recorded- a potentially devastating security flaw. Adam Brown, Manager of Security Solutions at Synopsys commented below.
Adam Brown, Manager of Security Solutions at Synopsys:
“No amount of penetration testing, code scanning or other techniques to discover security bugs would have identified this. That’s because this is a design flaw and highlights the importance of conducting architectural risk analysis at the start of the design.”
The opinions expressed in this post belongs to the individual contributors and do not necessarily reflect the views of Information Security Buzz.