Cameras, wearables, and home sensors produce highly personal data. Excessive collection combined with weak protection exposes users when devices, apps, or vendor clouds are breached.
Collect only the data required for the device to function, de-identify where possible, protect stored data, and let users see and control what is collected.
The same feature written the risky way, then with the fix applied.
How this risk has ranked in each OWASP release.
2014Latest
#05iot05-2014 Privacy Concerns