Roku and Sonos streaming devices are vulnerable to attack via PC-based web browsers. The devices can be attacked through domain name system (DNS) rebinding, a process which can directly attack smart home and internet of things devices running on the same Wi-Fi network, said web developer Brannon Dorsey. "The way that this is done is by redirecting DNS requests from one device to another in order to trick them into thinking they have been redirected to an attacker's website," Dorsey said. This filters out external communications from private IP address ranges that are intended for internal network use. Both Roku and Sonos are working on fixes.
Roku and Sonos streaming devices are vulnerable to attack via PC-based web browsers. The devices can be attacked through domain name system (DNS) rebinding, a process which can directly attack smart home and internet of things devices running on the same Wi-Fi network, said web developer Brannon Dorsey. Users can protect their computers from DNS rebinding with the OpenDNS Home service, he added. This filters out external communications from private IP address ranges that are intended for internal network use. Both Roku and Sonos are working on fixes.