Delegated Responsibility, Distributed Risk: A Socio-Technical Analysis of IoT Vulnerabilities in the Ring Hacking Incidents of 2019

Author:
Biondolillo, Daniel, School of Engineering and Applied Science, University of Virginia
Advisor:
Laugelli, Benjamin, University of Virginia
Abstract:

Sociotechnical Synthesis: Technical Innovation and Sociotechnical Analysis in IoT Systems
My technical capstone project and STS research paper both address the challenges and complexities of Internet of Things (IoT) systems, but from complementary perspectives. While my technical work focused on designing and implementing the VersaHub IoT management platform for commercial environments, my STS research paper critically examined the 2019 Ring hacking incidents to understand how vulnerabilities in consumer IoT devices emerge from the interplay of technical design, user behavior, and regulatory gaps. Both projects explore how human and non-human actors interact within IoT ecosystems, albeit with different emphases: the technical report centers on building robust, scalable platforms, whereas the STS paper examines the sociotechnical networks that shape security outcomes.
The technical report documents my contributions to the development of VersaHub, an IoT platform deployed at WebstaurantStore to monitor and manage smart kitchen and janitorial devices. My work involved building an administrative portal for troubleshooting, as well as a real-time data reporting system using React, ASP.NET Core, SQL Server, and the Recharts library. Key features include live sensor data visualization, instant alerts for equipment malfunctions, and an interactive dashboard that enables administrators to detect outages and optimize operations. These enhancements improved operational efficiency, reduced downtime, and increased user satisfaction by providing up-to-date insights and streamlined device management. The project also highlighted ongoing challenges in ensuring data privacy and security, underscoring the need for responsible innovation as IoT platforms scale in complexity and reach.
In my STS research paper, I used Actor-Network Theory (ANT) to analyze the Ring hacking incidents of 2019, where attackers exploited design flaws and weak user practices to gain unauthorized access to home security cameras. ANT provided a lens to trace how Ring’s design choices, user behaviors, hacker methodologies, and regulatory gaps collectively produced vulnerabilities. Rather than assigning blame solely to users or manufacturers, my argument emphasized the fragility of socio-technical networks and the need for shared responsibility. The paper concluded that resilient IoT ecosystems require both thorough technical safeguards and regulatory frameworks to align corporate incentives with user safety.
Working on both projects deepened my understanding of the multifaceted nature of IoT security and management. Developing VersaHub provided firsthand experience with the technical challenges of building scalable, user-friendly platforms, while the STS research encouraged me to consider how design decisions delegate responsibility and affect user practices. Insights from the Ring case study prompted reflection on the importance of proactive security measures, user education, and regulatory compliance in future technical work. Ultimately, integrating sociotechnical analysis with engineering practice has equipped me to approach IoT development more holistically, balancing innovation with ethical responsibility.

Degree:
BS (Bachelor of Science)
Keywords:
Internet of Things, Computer Science, Security, Privacy, Risk
Notes:

School of Engineering and Applied Science

Bachelor of Science in Computer Science

STS Advisor: Benjamin Laugelli

Language:
English
Issued Date:
2025/05/04