Can IoT Devices Become Ticking Time Bombs?