Stop 12 · Cryptography & Advanced TopicsTopics · 6/8

IoT Security Basics

In short

Smart cameras, bulbs and doorbells are tiny computers that often ship with weak passwords and rarely get updates. Each one can become a doorway into the home or office network.

Internet of Things devices often ship with weak default credentials, unpatched firmware, and minimal security controls — a rapidly growing and often poorly secured attack surface.

The blob uses a screwdriver to change the lock on a smart doorbell camera.

Think of it like this

Same key for the whole colony

Imagine a builder fits every flat in a colony with the same lock and the same key. Anyone who gets one key can open every door. Cheap IoT devices often do this with default passwords. Changing the lock on day one fixes the worst problem.

Watch it happen

Hardening a new smart camera

Inventory

Defaults

Firmware

Segment

Monitor

1/5List every connected device: model, owner, where it sits on the network.

The big ideas

What you need to know

Defaults are public

Default logins for many devices are listed online. Botnets have scanned for them for years. Change them first.

Patching is rare

Many devices stop getting updates after a few years. Check support periods before buying.

Segment everything

A separate network for IoT limits the blast radius when, not if, one device is weak.

Turn off what you skip

Disable UPnP, remote cloud access and open ports you do not need. Less exposure, fewer bugs reachable.

See it in code

Walk through the code

bash

1# Only on YOUR own network, e.g. a home lab IoT segment2sudo nmap -sV 192.168.50.0/24 -oN iot-scan.txt3 4# Then read the report: what is listening on each device?5grep -E "open|Nmap scan report" iot-scan.txt

1/2Scan your own subnet and save the results. Scanning networks you do not own needs written permission.

A service scan of your own IoT segment shows which devices expose web panels, telnet or other services you may want to switch off.

Save yourself the pain

Common mistakes

Oops

Leaving a smart camera on the same Wi-Fi as work laptops.

Do this instead

Use a guest or IoT network. If the camera is hacked, it cannot reach your important machines.

Oops

Forwarding router ports so you can view the camera from outside.

Do this instead

Use the vendor's secure app or a VPN instead. Open ports invite scanners from the whole internet.

Your mission

Audit your home devices

~30 min

Quick check

What is the single most effective first step when installing a new IoT device?

Go deeper

1Research a real IoT botnet (like Mirai) and how it exploited weak default credentials at scale.
2Learn why IoT devices are harder to patch and monitor than traditional computers.
3Understand network segmentation (Phase 2) as a key mitigation for IoT device risk.