Live data from Hacker News

How to get root access to your Sleep Number bed

dillan.org

31–40 of 254 posts

Re: How to get root access to your Sleep Number bed

#31

Earlier quoted context omitted.

You have it backwards. They're assuming non-open source is backdoor'ed. Not that open source isn't backdoor'ed.

I don't have it backwards. That is what I said. They are assuming non open source is backdoored. That does not mean open source is not also backdoored.

No, you you said

>Why are you assuming that only non open source devices are vulnerable?

Re: How to get root access to your Sleep Number bed

#32
post #10
post #2

Why does a bed need to run Linux? Why? Of all the possible timelines, we live in the dumbest. What was wrong with a plain old bed without 1GB of RAM and a full OS running on it?! It is the same everywhere. Finding a washing machine that was not WiFi-connected was a chore and I dread doing it again in ten years. As a person who's broken into O(1000) "smart" devices (for fun and for profit both), I do not want them in…

what would be a better way to design this that is cheap and updatable? Specialized hardware is riskier to build, b/c bugs would require a complete reprint.

Why would I want so much software in my bed that even makes sense to discuss updating it?

Re: How to get root access to your Sleep Number bed

#33
post #29

Earlier quoted context omitted.

Now think about 3D printers like the Bambu. A machine tool that can self-combust.

Shades of Iranian centrifuges.

Really really light shades. Destroying a country's ability to produce weapons grade nuclear fuel vs potentially burning down a hacker's/tinkerer's house; I don't think these are any where near the same level

Re: How to get root access to your Sleep Number bed

#34

Earlier quoted context omitted.

This is what makes me suspicious about Chinese home products like govee and how cheap they are. You're required to hard code in your SSID and Wi-Fi password. And they consistently beg for your location, despite having no need for it.

Now think about 3D printers like the Bambu. A machine tool that can self-combust.

Citation needed. Even at 100% duty cycle the heated bed tops out at a stable, safe temperature. I know because I’ve struggled to keep it hot enough for certain materials.

Maybe you could argue that the hot end could be set to melt down, ignoring the built-in safety mechanisms, but thats a stretch for doing much more than breaking the printer due to the way it’s designed.

Regardless, if all of this still scares someone they can run it in local-only mode without internet access.

The Bambu printer fear mongering is ridiculous.

Re: How to get root access to your Sleep Number bed

#35
post #9
post #5

Wait, this is about an actual bed -- you know, the kind that you sleep on -- that runs an SSH server on Linux ? W. T. F. !?

how else would you record and transmit measurements to a server? lower-level hardware and software is expensive to develop on and potentially be difficult to update.

I don't need my bed to transmit measurements to a server. I need my bed to be comfortable to sleep on. I need exactly zero interactions with a server for that.

So, yeah, back to the question. Why does my bed have an SSH server? Because it needs to be able to talk to some machine on the internet. And why does my bed need that? It's a bed.

[Edit: Wait a minute. Even if I do want to transmit measurements, why is my bed running a server? My bed should be running a client.]

Re: How to get root access to your Sleep Number bed

#36
post #32
post #10

Earlier quoted context omitted.

what would be a better way to design this that is cheap and updatable? Specialized hardware is riskier to build, b/c bugs would require a complete reprint.

Why would I want so much software in my bed that even makes sense to discuss updating it?

Smart temperature and softness adaptation for different regions? Sleep stats of your positions, maybe combined with some deep sleep stats? I mean, there are options

Re: How to get root access to your Sleep Number bed

#37
post #5

Wait, this is about an actual bed -- you know, the kind that you sleep on -- that runs an SSH server on Linux ? W. T. F. !?

Is this your first exposure to Linux-based embedded devices? It’s very common to run Linux on embedded devices. There are even variants of Linux designed for microcontrollers.

Re: How to get root access to your Sleep Number bed

#38
post #9

Earlier quoted context omitted.

how else would you record and transmit measurements to a server? lower-level hardware and software is expensive to develop on and potentially be difficult to update.

I don't need my bed to transmit measurements to a server . I need my bed to be comfortable to sleep on. I need exactly zero interactions with a server for that. So, yeah, back to the question. Why does my bed have an SSH server? Because it needs to be able to talk to some machine on the internet. And why does my bed need that? It's a bed. [Edit: Wait a minute. Even if I do want to transmit measurements, why is my bed…

[deleted]

Re: How to get root access to your Sleep Number bed

#39
post #10

Earlier quoted context omitted.

what would be a better way to design this that is cheap and updatable? Specialized hardware is riskier to build, b/c bugs would require a complete reprint.

NOTHING in a bed needs to be updatable. Nothing. It needs a PIC12F509 to run a motor when you press a button and check for a jam.

but but but, we need to see all of that data about your sleeping patterns so we can adjust settings to make you even more comfy. are you getting too hot? we'll cool down the temp for you. getting too cold? we'll heat it up. starting to snore, we'll automatically incline you to change your positioning.

of course we'll also sell all of that data so we can send you an ad for new bamboo sheets to keep you cool. or any thing else from anyone else that offers us money for the data

Re: How to get root access to your Sleep Number bed

#40
post #7
post #2

Why does a bed need to run Linux? Why? Of all the possible timelines, we live in the dumbest. What was wrong with a plain old bed without 1GB of RAM and a full OS running on it?! It is the same everywhere. Finding a washing machine that was not WiFi-connected was a chore and I dread doing it again in ten years. As a person who's broken into O(1000) "smart" devices (for fun and for profit both), I do not want them in…

At least it doesn't run windows

"man, i tried going to bed last night, but it was a BSOD so I had to reboot it, but then it needed 45 minutes of OS updates before I could get in the bed."

seems like a pretty good torture on multiple levels

Post reply on HN