Flipkart

Thursday 22 August 2013

The Chromecast is for sharing and isn't secure by design

Chromecast
Is anyone aware if there are any plans to add security to this? Either by Google or maybe a developer working something? I am using some of these for information monitor purposes at a restaurant I do IT work for. One of the employees "accidentally" started broadcasting YouTube videos to the TV overriding the computer feed. Even something as simple as requiring a pin before transmitting would be perfect.
My only other idea would be to put the Chromecast and computer on a different subnet to reduce the likelihood of accidental broadcast.
Anyone, let me know your thoughts. Thanks!
Of course we can't be sure of Google's plans (nobody ever is), but we think the Chromecast was designed for this sort of behavior. Anyone on the same network has access to cast right to the TV using it, and in Google's eyes this makes it social and fun. Because of this, it's inherently insecure.
Now, in all fairness, the Chromecast is posed as a pure consumer entertainment device. We're not surprised that Google has not built-in checks to lock it down. That doesn't mean third party developers won't find a way to make that happen (have you seen what those guys can do?), but for now I think we had better get used to the idea that anyone you put on the same network as the Chromecast is going to be able to send stuff to the television.
The only suggestion we could have would be to secure the network it's on, and be very prudent about who and why you give out the credentials. Or just don't put a Chromecast in a space where it could become an issue.

No comments:

Post a Comment

Popular Posts