Your Company Name
DESIGN
built for & by nerds

Like you, we love building awesome products on the web. We love it so much, we decided to help people just like us do it easier, better, and faster.

CODE
12-column grid

Bootstrap is designed to help people of all skill levels - designer or developer, huge nerd or early beginner. Use it as a complete kit or use to start something.

CREATE
responsive

Bootstrap have gone fully responsive. Our components are scaled according to a range of resolutions and devices to provide a consistent experience.

SUPPORT
growing library

Despite being only 7kb (gzipped), Bootstrap is one of the most complete front-end toolkits out there with dozens of fully functional components.

Recent Work

The access SmartThings grants by default is at a full device level, rather than any narrower," Prakash said. "As an analogy, say you give someone permission to change the lightbulb in your office, but the person also ends up getting access to your entire office, including the contents of your filing cabinets

More than 40 percent of the nearly 500 apps they examined were granted capabilities the developers did not specify in their code. That's how the researchers could eavesdrop on setting of lock PIN codes

view portfolio

catalogue

The researchers also found that it is possible for app developers to deploy an authentication method called OAuth incorrectly. This flaw, in combination with SmartApps being over-privileged.

loupe

allowed the hackers to program their own PIN code into the lock—to make their own secret spare key..

retro rocket

Finally, the "event subsystem" on the platform is insecure. This is the stream of messages devices generate as they're programmed and carry out those instructions.

infographics

The researchers were able to inject erroneous events to trick devices. That's how they managed the fire alarm and flipped the switch on vacation mode.

mock up

These results have implications for all smart home systems, and even the broader Internet of Things.

retro badges

he bottom line is that it's not easy to secure these systems" Prakash said.

details

There are multiple layers in the software stack and we found vulnerabilities across them, making fixes difficult.

vintage form

The researchers told SmartThings about these issues in December 2015 and the company is working on fixes.