Philips Hue light globes cost $60 each, or $200 for a pack of three. They can be controlled wirelessly by a single network-facing device, known as the Hue Bridge. But security researcher Nitesh Dhanjani says the device isnt terribly secure. There are no HTTPS, and not even any HTTP digest authentication, to protect the commands from eavesdropping or replay. You have to press the button on the Bridge less than 30 seconds before issuing an add user command, a step the company says prove[s] that the user has physical access to the Bridge”]
Source: https://nakedsecurity.sophos.com/2013/08/18/how-much-security-would-you-expect-in-a-60-light-globe/