Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Three million malware-infected smart toothbrushes used in Swiss DDoS attacks

tomshardware.com

Post reply on HN
Print view View original

161–170 of 182 posts

Re: Three million malware-infected smart toothbrushes used in Swiss DDoS attacks

#161

Post by radicality »

UberFly wrote: post #70
dessant wrote: post #49

A warning about Philips electric toothbrushes: you cannot turn off Bluetooth on them, even if you are not using the smart features. Also be careful with all Philips air purifiers that support Wi-Fi, because the remote control feature cannot be disabled. They create a Wi-Fi hotspot that you need to connect to with a smartphone to finish setting up the device, but if you don't use these features, the air purifier will…

I'm reminded of this that I read a few days ago: Home assistant picked up my neighbours Bluetooth toothbrush and now I can see when they brush their teeth. https://old.reddit.com/r/homeassistant/comments/1306pcw/home...

The exact same thing happened to me! Randomly one day a new toothbrush entity appeared in HA, even though I’m still using a “dumb” electric toothbrush.

Re: Three million malware-infected smart toothbrushes used in Swiss DDoS attacks

#162

Post by kramerger »

Freebytes wrote: post #31

I dread the inevitable "Internet dildo wars of 2037" where millions of networked dildos and refrigerators wreaked havoc on the entire Internet causing billions in damage. "Suspects remain at large."

Didn't we already have a smart dildo incident in 2022?

Something about the sound recordings made by the accompanying app leaking?

Re: Three million malware-infected smart toothbrushes used in Swiss DDoS attacks

#163

Post by p91paul »

imglorp wrote: post #26

Is nobody going to mention Java running on the toothbrush? One might guess the firmware included a battery controller, bluetooth or wifi stacks, a little storage, and business logic for buttons and brushing.

well, you need to have something to run that business logic (which includes phoning home to the manufacturer), don't you? Java is as good as any other runtime.

Re: Three million malware-infected smart toothbrushes used in Swiss DDoS attacks

#165

Post by tauchunfall »

greenyoda wrote: post #157
croon wrote: post #145

Earlier quoted context omitted.

I can't read dutch, but machine translated to english the "original source" as referenced in your link says this: > The example that comes like a Hollywood scenario has really happened that way.

> I can't read dutch, but... It's not Dutch, it's German, so trying to translate it as if it were Dutch would give strange results (although Google Translate tried to do it anyway, and came fairly close, due to the languages being somewhat related). The original sentence: "Das Beispiel, das wie ein Hollywood-Szenario daherkommt, hat sich wirklich so zugetragen." Translating from German, Google Translate gave me: "Thi…

>It's not Dutch, it's German, so trying to translate it as if it were Dutch would give strange results

Anecdote: One of my coworkers once thought that Dutch means German. I guess it was because the words "dutch" and "deutsch" look so similar.

Re: Three million malware-infected smart toothbrushes used in Swiss DDoS attacks

#166

Post by tschoesi »

rakslice_ wrote: post #144
tgsovlerkhgsel wrote: post #138

Earlier quoted context omitted.

That toot references https://archive.is/2024.01.30-203406/https://www.luzernerzei... which attributes the story to Stefan Züger from the Swiss branch of Fortinet and claims it to be an actual event. I don't see a mention of "NoName Ddosia".

Re "Noname Ddosia": It's from the context, if you know your recent infosec history: "Jüngst wurden damit auch Server von Schweizer Regierungsstellen während des Weltwirtschaftsforums angegriffen – als Retourkutsche für die Teilnahme des ukrainischen Präsidenten Wolodimir Selenski. Eine russlandnahe Gruppierung bekannte sich zum Angriff." (translation: "Servers of Swiss government offices were recently attacked during…

WEF is in winter

Re: Three million malware-infected smart toothbrushes used in Swiss DDoS attacks

#167

Post by fiprisoner »

tschoesi wrote: post #166
rakslice_ wrote: post #144

Earlier quoted context omitted.

Re "Noname Ddosia": It's from the context, if you know your recent infosec history: "Jüngst wurden damit auch Server von Schweizer Regierungsstellen während des Weltwirtschaftsforums angegriffen – als Retourkutsche für die Teilnahme des ukrainischen Präsidenten Wolodimir Selenski. Eine russlandnahe Gruppierung bekannte sich zum Angriff." (translation: "Servers of Swiss government offices were recently attacked during…

WEF is in winter

Usually in January, 2021 was in August and 2022 in May.

Re: Three million malware-infected smart toothbrushes used in Swiss DDoS attacks

#168

Post by mewpmewp2 »

metadat wrote: post #71
gtirloni wrote: post #66

Earlier quoted context omitted.

> The second is the fact that devices on the LAN are accessible to other devices on the LAN. Malicious JS in a webpage can scan for and compromise other local devices. Which browser API enables that?

I was skeptical at first, but did some superficial scouting.. it's trivial for a malicious website to do nasty things to any internal resource which doesn't have a strict CORS policy. https://security.stackexchange.com/questions/177486/can-webs... As the adage goes, the "S" in IOT stands for "Security".

But CORS is strict by default. They must specially add headers to allow such requests.

Re: Three million malware-infected smart toothbrushes used in Swiss DDoS attacks

#169

Post by throw0101b »

renewiltord wrote: post #156
renewiltord wrote: post #107

Earlier quoted context omitted.

Well, now we're straying from the original, but there's the libertarian copypasta on Reddit: https://www.reddit.com/r/copypasta/comments/7iqxko/libertari... > I was shooting heroin and reading “The Fountainhead” in the front seat of my privately owned police cruiser when a call came in. I put a quarter in the radio to activate it. It was the chief. > “Bad news, detective. We got a situation.” > “What? Is the mayor tr…

I've later found that this is a New Yorker humor piece https://www.newyorker.com/humor/daily-shouts/l-p-d-libertari... That makes sense. Their fiction was always top notch when I subscribed.

LOL:

> “Not yet. But mark my words: we’re going to figure out who did this and we’re going to take them down … provided someone pays us a fair market rate to do so.”

> “Easy, chief,” I said. “Any rate the market offers is, by definition, fair.”

Re: Three million malware-infected smart toothbrushes used in Swiss DDoS attacks

#170

Post by throw0101b »

znpy wrote: post #118
dylan604 wrote: post #82

Earlier quoted context omitted.

This would funny but since it's pretty much exactly how printers behave it's more just a slap in the face

I guess it's time to echo the meme: "The band 'Rage against the machine' does not explicitly says what kind of machine they are enraged to, but I'm pretty sure it's a printer". EDIT: screen of the original tweet: https://old.reddit.com/r/printers/comments/vqmbu4/rage_again...

Neil Young's song "Piece of Crap" was (supposedly) about a (then-innovative) plain paper fax machine (previously they used thermal paper):

* https://genius.com/Neil-young-and-crazy-horse-piece-of-crap-...

* Album: https://en.wikipedia.org/wiki/Sleeps_with_Angels

Post reply on HN