Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Three million malware-infected smart toothbrushes used in Swiss DDoS attacks

tomshardware.com

Post reply on HN
Print view View original

151–160 of 182 posts

Re: Three million malware-infected smart toothbrushes used in Swiss DDoS attacks

#151

Post by jamesrr39 »

mynameisvlad wrote: post #146
jamesrr39 wrote: post #139

Earlier quoted context omitted.

At a guess; if able to monitor over a period of time (e.g. pick up data from a parked car), a potential burglar can see when there is activity and figure what times of the day house occupants are normally at home.

> that can't be gleamed by just looking through their windows, blinds and all. I mean, sure, but who is going to do that when they can... look to see when people are home.

More subtle; the burglar could just park up and go off for a few hours and gather the data they need - no need for a suspicious camera pointing out of the car to monitor patterns.

If the burglar only takes a 30 second look before breaking in, residents could be home but away from a window, with this the burglar can more confidently know when is a good time to break in, without exposing themselves to the same risk that looking around the house brings.

Re: Three million malware-infected smart toothbrushes used in Swiss DDoS attacks

#152

Post by progbits »

quenix wrote: post #143
progbits wrote: post #123

Earlier quoted context omitted.

How does it know the location you are brushing?

I would presume a bunch of IMUs and fusing together orientation/accel data? I can see how knowing the orientation and relative motion of the head might allow one to map this out.

I assume you mean the head of the toothbrush but what about my head?

The IMU data is relative to earth (kinda). But toothbrush position over teeth is relative to my head. Moving around and turning your head gets added to the IMU measurements with no way to tell it apart.

Did I turn my head/body 90 degrees left, or did I move the toothbrush 90 degrees from my front teeth to the rear left ones? Impossible to tell these apart.

Re: Three million malware-infected smart toothbrushes used in Swiss DDoS attacks

#153

Post by gnabgib »

metadat wrote: post #77
blacksmith_tb wrote: post #74

Earlier quoted context omitted.

I suppose you could just loop through all the IPs for some common ranges like 10.0.0.0/16 and 192.168.0.0/16 looking for a given port, if you knew the toothbrushes exposed it and there was something exploitable there, that makes sense.

Even 192.168.1.0/8 will probably get you ~95% coverage for residential networks.

Did you mean /24? As low as /16 is valid, but /8 includes plenty of public addresses.

Re: Three million malware-infected smart toothbrushes used in Swiss DDoS attacks

#154

Post by metadat »

gnabgib wrote: post #153
metadat wrote: post #77

Earlier quoted context omitted.

Even 192.168.1.0/8 will probably get you ~95% coverage for residential networks.

Did you mean /24? As low as /16 is valid, but /8 includes plenty of public addresses.

Thanks, you're right!

Re: Three million malware-infected smart toothbrushes used in Swiss DDoS attacks

#155

Post by n2d4 »

croon wrote: post #145
depereo wrote: post #122

Earlier quoted context omitted.

It's not something that actually happened. It's just some bullshit that's gone viral. https://cyberplace.social/@GossiTheDog/111886558855943676

I can't read dutch, but machine translated to english the "original source" as referenced in your link says this: > The example that comes like a Hollywood scenario has really happened that way.

Here's a better translation:

> This example, which seems like a Hollywood scenario, actually happened.

Re: Three million malware-infected smart toothbrushes used in Swiss DDoS attacks

#156

Post by renewiltord »

renewiltord wrote: post #107
kps wrote: post #37

Earlier quoted context omitted.

“The door refused to open. It said, “Five cents, please.” He searched his pockets. No more coins; nothing. “I’ll pay you tomorrow,” he told the door. Again he tried the knob. Again it remained locked tight. “What I pay you,” he informed it, “is in the nature of a gratuity; I don’t have to pay you.” “I think otherwise,” the door said. “Look in the purchase contract you signed when you bought this conapt.” In his desk…

Well, now we're straying from the original, but there's the libertarian copypasta on Reddit: https://www.reddit.com/r/copypasta/comments/7iqxko/libertari... > I was shooting heroin and reading “The Fountainhead” in the front seat of my privately owned police cruiser when a call came in. I put a quarter in the radio to activate it. It was the chief. > “Bad news, detective. We got a situation.” > “What? Is the mayor tr…

I've later found that this is a New Yorker humor piece https://www.newyorker.com/humor/daily-shouts/l-p-d-libertari...

That makes sense. Their fiction was always top notch when I subscribed.

Re: Three million malware-infected smart toothbrushes used in Swiss DDoS attacks

#157

Post by greenyoda »

croon wrote: post #145
depereo wrote: post #122

Earlier quoted context omitted.

It's not something that actually happened. It's just some bullshit that's gone viral. https://cyberplace.social/@GossiTheDog/111886558855943676

I can't read dutch, but machine translated to english the "original source" as referenced in your link says this: > The example that comes like a Hollywood scenario has really happened that way.

> I can't read dutch, but...

It's not Dutch, it's German, so trying to translate it as if it were Dutch would give strange results (although Google Translate tried to do it anyway, and came fairly close, due to the languages being somewhat related).

The original sentence: "Das Beispiel, das wie ein Hollywood-Szenario daherkommt, hat sich wirklich so zugetragen."

Translating from German, Google Translate gave me:

"This example, which seems like a Hollywood scenario, actually happened."

Translating, as if it were Dutch, Google Translate gave me:

"The play, the one who comes to a Hollywood theater, is such a work in itself."

Re: Three million malware-infected smart toothbrushes used in Swiss DDoS attacks

#158

Post by greenyoda »

renewiltord wrote: post #156
renewiltord wrote: post #107

Earlier quoted context omitted.

Well, now we're straying from the original, but there's the libertarian copypasta on Reddit: https://www.reddit.com/r/copypasta/comments/7iqxko/libertari... > I was shooting heroin and reading “The Fountainhead” in the front seat of my privately owned police cruiser when a call came in. I put a quarter in the radio to activate it. It was the chief. > “Bad news, detective. We got a situation.” > “What? Is the mayor tr…

I've later found that this is a New Yorker humor piece https://www.newyorker.com/humor/daily-shouts/l-p-d-libertari... That makes sense. Their fiction was always top notch when I subscribed.

When Michael Bloomberg was the mayor of NYC, he did actually ban trans fats from NYC restaurants:

https://en.wikipedia.org/wiki/Michael_Bloomberg#Political_po...

Re: Three million malware-infected smart toothbrushes used in Swiss DDoS attacks

#160

Post by manicorganic »

dessant wrote: post #49

A warning about Philips electric toothbrushes: you cannot turn off Bluetooth on them, even if you are not using the smart features. Also be careful with all Philips air purifiers that support Wi-Fi, because the remote control feature cannot be disabled. They create a Wi-Fi hotspot that you need to connect to with a smartphone to finish setting up the device, but if you don't use these features, the air purifier will…

Since we're on the subject, also be careful of Philips CPAP machines, they will slowly spray disintegrating cancer-causing foam into your lungs as you sleep.

Great company though, it's not like they had the choice to not buy out one of the best CPAP manufacturers and then skimp out on materials until they hit the cancer recall margin of diminishing returns (and then hide it for as long as possible).

Post reply on HN