Surprising No One, or Possibly Everyone, Fitness Trackers Aren’t Secure

The Citizen's Guide to the Future
Aug. 1 2014 1:33 PM

Surprising No One, or Possibly Everyone, Fitness Trackers Aren’t Secure

fitness
Are fitness trackers leaking data?

Graphic from Shutterstock/JMici.

We all know that cybersecurity is a problem. Twitter accounts, credit card data, and all manner of portable gadgets get hacked every day. So we’ve all kind of been waiting for the other shoe to drop with wearables, right? Or maybe we’ve made the same mistake we always make and blissfully assumed that our fitness trackers were secure. Well, they're not.

In the study “How Safe Is Your Quantified Self?,” security giant Symantec explores vulnerabilities in everything from dedicated wearable trackers to apps that coordinate with smartphone sensors to collect fitness data. And the results are concerning. The study explains, “Symantec has found security risks in a large number of self-tracking devices and applications. One of the most significant findings was that all of the wearable activity-tracking devices examined, including those from leading brands, are vulnerable to location tracking.” All of them.

Advertisement

Symantec describes how the more elements there are in quantified-self data collection, the more points of access there are for hackers. For example, if data is stored on a wearable device, is synced to a PC or smartphone, is stored on that additional device, and is also stored in the cloud, there are many opportunities for theft or infiltration into the system.

The company found that all the wearables it tested could be hacked to do location tracking on an individual, and it was especially easy on models using Bluetooth LE. Additionally, 20 percent of apps Symantec looked at sync login credentials without any encryption. And the apps and devices leak tons of raw data that may seem harmless, but can give hackers information about personal details like your daily schedule or sex life:

We ... found that even devices that are not obviously traceable can still be tracked wirelessly due to implementations that do not use available privacy features ... We would conclude that there are positive signs that some vendors are doing the right things, but far too many are not. Just how safe is your quantified self? We think that it could be an awful lot safer than it currently is.

It’s an especially bleak report when you think about how the rise of fitness trackers has largely overlapped with revelations about the reach and depth of government surveillance worldwide. People just want to trust their devices no matter how much evidence there is that they probably shouldn’t.

Future Tense is a partnership of SlateNew America, and Arizona State University.

Lily Hay Newman is lead blogger for Future Tense.

TODAY IN SLATE

Politics

Meet the New Bosses

How the Republicans would run the Senate.

The U.S. Is So, So Far Behind Europe on Clean Energy

The Government Is Giving Millions of Dollars in Electric-Car Subsidies to the Wrong Drivers

Even if You Don’t Like Batman, You Might Like Gotham

Friends Was the Last Purely Pleasurable Sitcom

The Eye

This Whimsical Driverless Car Imagines Transportation in 2059

Medical Examiner

Did America Get Fat by Drinking Diet Soda?  

A high-profile study points the finger at artificial sweeteners.

A Woman Who Escaped the Extreme Babymaking Christian Fundamentalism of Quiverfull

John Oliver Debunks the Miss America Pageant’s Claim That It Gives Out $45 Million in Scholarships

Trending News Channel
Sept. 20 2014 11:13 AM Watch Flashes of Lightning Created in a Lab  
  News & Politics
Over There
Sept. 22 2014 1:29 PM “That’s Called Jim Crow” Philip Gourevitch on America’s hypocritical interventions in Africa.
  Business
Moneybox
Sept. 22 2014 1:37 PM Subprime Loans Are Back! And believe it or not, that’s a good thing.
  Life
Outward
Sept. 22 2014 2:55 PM Nuptial Expert Sarkozy Worries About Gay Marriage and the Family
  Double X
The XX Factor
Sept. 22 2014 12:29 PM Escaping the Extreme Christian Fundamentalism of "Quiverfull"
  Slate Plus
Slate Plus
Sept. 22 2014 1:52 PM Tell Us What You Think About Slate Plus Help us improve our new membership program.
  Arts
Brow Beat
Sept. 22 2014 3:16 PM Watch the Best Part of Beyoncé and Jay Z’s On the Run Tour
  Technology
Future Tense
Sept. 22 2014 12:14 PM Family Court Rules That You Can Serve Someone With Legal Papers Over Facebook
  Health & Science
Science
Sept. 22 2014 12:15 PM The Changing Face of Climate Change Will the leaders of the People’s Climate March now lead the movement?
  Sports
Sports Nut
Sept. 18 2014 11:42 AM Grandmaster Clash One of the most amazing feats in chess history just happened, and no one noticed.