More awful IoT stuff • Hacker News Board

Re: More awful IoT stuff

#21

Post by FussyZeus » Wed, Jun 22, 2016, 1:27 PM UTC

There's so much potential in the market for proper, well made IoT devices that would bring around the hardcore skeptics like myself. I mean really well made products, properly encrypted with well made API endpoints that come with good apps for the uninitiated -AND- the ability to be scripted and automated by the techies. (You can do both, there's no reason why you can't and I don't understand why everyone refuses to). Oh, and not having them phone home to who-knows-where-istan around Australia, or at the very least, having the ability to TURN THAT OFF.

Seriously why have NO companies come forward with products like this. I'd buy a house worth if someone did.

Re: More awful IoT stuff

#22

Post by pc86 » Wed, Jun 22, 2016, 1:28 PM UTC

diggan wrote: post #18

So there is a great amount of lists, blogposts and information about awful/bad IoT things, but if someone like me want to have a list about IoT things that are actually secure and well-working, where would I find that?

I think that's your answer.

Re: More awful IoT stuff

#23

Post by manyxcxi » Wed, Jun 22, 2016, 1:35 PM UTC

diggan wrote: post #18

So there is a great amount of lists, blogposts and information about awful/bad IoT things, but if someone like me want to have a list about IoT things that are actually secure and well-working, where would I find that?

It's not that easy. I stick with brands/products that are reviewed by people I trust or have seemed to pick up some momentum.

My general rule of thumb is I NEVER buy anything IoT that is WiFi based. Zigbee or Z-Wave based devices will save you a lot of security nightmares (though definitely not all).

Re: More awful IoT stuff

#24

Post by manyxcxi » Wed, Jun 22, 2016, 1:39 PM UTC

Funny timing... I just bought an LG LFXS30776S refrigerator and the first thing I noticed was that all of a sudden I had a new WiFi broadcast. Turns out that according to tech support there's no way to shut this off.

Re: More awful IoT stuff

#25

Post by JoeAltmaier » Wed, Jun 22, 2016, 1:42 PM UTC

manyxcxi wrote: post #24

Funny timing... I just bought an LG LFXS30776S refrigerator and the first thing I noticed was that all of a sudden I had a new WiFi broadcast. Turns out that according to tech support there's no way to shut this off.

Sure there is! Find the antenna and rip it out or short it out.

Re: More awful IoT stuff

#26

Post by JoeAltmaier » Wed, Jun 22, 2016, 1:43 PM UTC

icebraining wrote: post #16

BostonEnginerd wrote: post #10

Earlier quoted context omitted.

I don't believe that's the case. As an owner of a device with GPL code on it, you are entitled to the source as well.

You are entitled by the license, but only the copyright holder can sue for the violation.

So, the GPL never had much power?

Re: More awful IoT stuff

#27

Post by Klathmon » Wed, Jun 22, 2016, 1:43 PM UTC

diggan wrote: post #18

So there is a great amount of lists, blogposts and information about awful/bad IoT things, but if someone like me want to have a list about IoT things that are actually secure and well-working, where would I find that?

I'd love a list like that as well, but sadly I don't think one exists and I don't think there's any money in doing it. Nobody wants to hear about good IoT devices, they want to make fun of bad ones and feel superior, that's what sells clicks.

Maybe i'm just being cynical...

Re: More awful IoT stuff

#28

Post by exelius » Wed, Jun 22, 2016, 1:44 PM UTC

marktangotango wrote: post #9

jussaskin wrote: post #7

IoT is all about unsecured devices generally?

That's been my understanding as well. The cpu's used typically aren't powerful enough to do anything other than simple encryption in a reasonable amount of time. Ssl is generally out of the question. Someone please educate me if that's incorrect.

Maybe if you're talking about an Arduino (which is more of a micro controller than a full-on CPU). Anything resembling a real CPU definitely has the horsepower for SSL.

Re: More awful IoT stuff

#29

Post by ethbro » Wed, Jun 22, 2016, 1:44 PM UTC

manyxcxi wrote: post #24

Funny timing... I just bought an LG LFXS30776S refrigerator and the first thing I noticed was that all of a sudden I had a new WiFi broadcast. Turns out that according to tech support there's no way to shut this off.

Transceiver, meet grounded aluminum foil?

Re: More awful IoT stuff

#30

Post by JoeAltmaier » Wed, Jun 22, 2016, 1:44 PM UTC

icebraining wrote: post #17

marktangotango wrote: post #9

Earlier quoted context omitted.

That's been my understanding as well. The cpu's used typically aren't powerful enough to do anything other than simple encryption in a reasonable amount of time. Ssl is generally out of the question. Someone please educate me if that's incorrect.

I don't think so, but even if they were, you can buy a crypto co-processor for less than $1/unit.

That could well be way over budget for hardware. Remember its $1 less margin on every unit. That's enough to kill many embedded projects.