Tablet PC and Ultra-Mobile PC News, Forums, and Video Reviews  
       
 
 


 

Friday, November 16, 2007

« Solio Solar Chargers 20% OffMain  | Juice Up Your Gear With An Onion and Gatorade »

GottaBeSecure: Dish Network Raises Broadband Robot Army

- Terry Bradley

clip_image002I am normally not overly concerned about privacy. I am the kind of person that gladly signs up for a grocery store rewards program (surrendering all my personal information in exchange for a 3% discount on “club card” sale items). That said, I was a little bit freaked out when I discovered my Dish Network digital video recorder (DVR) had connected to the Internet without any help from me. What’s more, it doesn’t even have an Ethernet cable or a WiFi adapter.

So how did this all happen? When I bought (uh, leased) my Dish Network ViP622 DVR™ it came with an Ethernet port on the back panel, which was label “for future use.” Since it didn’t do anything, no use plugging it into my home network (maybe someday, I thought…). However, sometime in the middle of the night a few days ago, Dish Network downloaded new software to my DVR which enabled my DVR to connect to a broadband network. Dish Network says this will allow me to download movies to my DVR from their Internet web site and will allow for new kinds of services from Dish Network.

clip_image004But back to the scary part…my DVR connected itself to my broadband Internet connection all by itself. I didn’t connect it to my home network with an Ethernet cable or install a WiFi adapter. My DVR, apparently, connected to my home network and then out to the Internet through its own power cord. How is that possible? Thanks to a technology called HomePlug or Powerline Ethernet you can network computers around your house using special Ethernet adapters that plug into your electrical wall sockets. I, in fact, have a couple of these devices in my house to network various computers that I either don’t want to run cables to or don’t have WiFi adapters for. Having a Powerline Ethernet adapter connected to my DSL modem allows these devices to talk across my home network and access the Internet.

So, as it turns out, my Dish Network ViP622 DVR™ has a built-in Powerline Ethernet adapter (unbeknownst to me). When Dish Network sent my DVR new software to allow it to connect to a broadband network, that's exactly what my DVR did. It connected out through its Powerline Ethernet adapter (through the power cord) and received a DHCP address from my DSL router (which is attached to my electrical wiring through a Netgear wall-plugged Ethernet bridge, pictured on the right). After that, my DVR “phoned home” to Dish Network and has been connecting back to www.dishnetwork.com and dishonlinebeta.com every few minutes ever since.

So what information is my DVR sending to Dish Network? I am sure I agreed to let my DVR do this somewhere in the fine print of my contract or end user license agreement (EULA). Nevertheless, I am now looking at all my home appliances with a suspicious eye… Is my toaster oven also connecting out via the Internet and telling some bread company how often I make toast? Is my refrigerator reporting to some interested party how much filtered water I’ve been drinking or how much ice I’ve been making?

Connecting to the Internet is nothing new for mobile devices, but products that connect themselves to any available broadband connection is, perhaps, the wave of the future. If you want to find out what’s connected to your home network, familiarize yourself with your home router’s DCHP or “active user” client list. My DVR shows up as “unknown PC.” You may be surprised what you find—I was!



Friday, November 16, 2007 9:42:21 AM (Mountain Standard Time, UTC-07:00)
How is this any different than wireless hackers stealing bandwidth? I can't believe corporate America thinks they can use your Internet connection without your consent!
anonymous
Friday, November 16, 2007 10:45:26 AM (Mountain Standard Time, UTC-07:00)
What concerns me (but I did not mention in the article for sake of brevity) is that I am losing some degree of control on my home network. If I hooked up the device, that's a kind of implied consent. However, I had no idea my DVR went online until after the fact. What's the security implication of this device? What information is it sending? What kinds of new attacks could it be exposing my network to? These are all questions I would have liked to consider before I made the decision to connect it to my broadband.
Terry Bradley
Friday, November 16, 2007 11:58:44 AM (Mountain Standard Time, UTC-07:00)
I have the same receiver and was already aware of the integrated HomePlug support, although most consumers don't know that that the ViP STBs from Echostar have it. Bear in mind that part of the simplicity of the HomePlug platform is that you typically don't need to configure devices for your network. They can often just work and that's something people need to understand about HomePlug technology before they implement it in their home. In this case, Dish activated the Ethernet capabilities directly and thus indirectly had Terry's device connect to the outside world because of the HomePlug environment. In my case (and likely in the case of the majority of customers with the 622 or 722), my STB did not connect out because I have a WLAN network. Definitely an awareness issue; no dispute on that and Echostar should have been a little more up-front for the consumers that have HomePlug on their network.
Friday, November 16, 2007 1:04:59 PM (Mountain Standard Time, UTC-07:00)
All complaining aside, I signed up for Dish Network's beta test to program my DVR over the Internet. I figure if my DVR is online, I might as well get some benefit out of it. I am still waiting to hear if I get to be one of their guinea pigs. I will be interested to see how this works from a security perspective (like, if I have to open a port on my firewall or not...).
Terry Bradley
Friday, November 16, 2007 2:47:01 PM (Mountain Standard Time, UTC-07:00)
This topic is rife with possibilities for either serious or spoof spy/sci-fi stories and the like (not to mention scarrier realities- are those devices made in China, BTW?)

I can see it now, you charge your digital camera or camcorder and, unbeknownst to you, it starts taking pictures and sends them to who knows where. Your television actually has infrared sensors and motion detectors amidst the wiring, feeding into the Mafia-connected monitoring site that notifies the crooks when you are not home and no dog is running loose in the house.
Mike Moore
Friday, November 16, 2007 3:13:36 PM (Mountain Standard Time, UTC-07:00)
How about your fridge sending its manufacturer a message that your water filter indicator light has just turned red...then they mail you a timely re-order form...

Better yet, maybe manufacturer sends a message to your fridge to tell it to turn on the 'replace filter' light a couple weeks before the end of the quarter to boost their revenues in time to meet analysts' expectations...
Terry Bradley
Monday, November 19, 2007 1:35:46 PM (Mountain Standard Time, UTC-07:00)
Of course you can control whether and when it connects through your router, but they definitely should be more forthcoming on info. BTW, all my kids game consoles connect too, apparently without my advance knowledge, so I ration their access through the router. Helps keep the kids off the games too. When unknown devices are connecting to your home network, it does make you wonder...
Brian
Monday, November 19, 2007 2:21:31 PM (Mountain Standard Time, UTC-07:00)
Point taken...those who are tech savvy know to monitor their home network (and know how to do it). Those who aren't, probably aren't worried. ;-)
Terry Bradley
Comments are closed.


       





Copyright 2008 GottaBeMobile.com
 
     

 
     
 
     
 
     
 
The vision of GottaBeMobile.com is to become the definitive source for mobile computing news, reviews, and commentary, as well as the home for the mobile community to discover and discuss these issues. When you think mobile, think GottaBeMobile.com.

The mobile computing space is one of the fastest growing and fastest changing spaces, and indeed industries worldwide. Within that constantly evolving and face paced world, GBM covers a range of spaces and technologies including Tablet PCs, UMPCs, MIDs, Ultra-portable computers, operating systems, software, natural human interfaces, accessories, mobile connectivity solutions, and other solutions that appeal to the mobile user.
     
Featured Stories
     
 
Latest GBM Shortcut Video Reviews and InkShows

 
News Categories
     
Twitter, Google Tools, etc
News Archive