tokens: In this scenario the attacker exploits : ( 1 ) the unauthenticated protocols of IoT devices , and ( 2 ) the ability to produce a light from a specific IoT device which its light reflections can be received by the scanner .