Live data from Hacker News

How to get root access to your Sleep Number bed

dillan.org

111–120 of 254 posts

Re: How to get root access to your Sleep Number bed

#111
post #4

Buried lede: “What I did find was a "convenient" backdoor that Sleep Number can use to SSH back into the hub (and my internal home network as a result).”

In my book if your setup grants access to anyone on your network then it was already insecure. Your wifi is too big a perimeter to defend; lock down the stuff you care about instead.

Re: How to get root access to your Sleep Number bed

#112

Earlier quoted context omitted.

Devil's advocate. As someone who has developed a Linux based appliance with over 100k live units across the globe, it seems insane to NOT have access to the thing you're selling and that you have to maintain. If your thing breaks or gets bricked by an update, you will call support and expect them to fix it. You don't want to send in your device or have a support technician come to your house to fix it. So yes, to the…

> As someone who has developed a Linux based appliance with over 100k live units across the globe, it seems insane to NOT have access to the thing you're selling and that you have to maintain. I’ve developed Linux devices selling that many units (and more) and I’m baffled that anyone would think this is a viable way to handle things at this scale. Units like this should have a firmly read-only Linux firmware that can…

[deleted]

Re: How to get root access to your Sleep Number bed

#113
post #30
post #6

Earlier quoted context omitted.

This was the most interesting point for me, and I assume most of my IOT type shit has this functionality.

some of the newer WiFi setups have an IoT subnet that works like a guest network. Worth using if your gear has it.

you absolutely need to do this. we call it the "internet of shit VLAN".

Re: How to get root access to your Sleep Number bed

#115

Funny part to me is that I fully assumed that this was a post about hacking Eight Sleep beds by someone who didn't want to explicitly name the company, presumably for vague legal reasons. Then I got to a picture of an apparently real "Number Sleep Hub" and my mind was blown. WTF are we in a timeline so weird that there are two companies making water cooled beds, one is called Eight Sleep and the other is Sleep Number…

I had never heard of either so thought the title was a metaphor for "how to get root access to your brain to improve sleep quality"

I sure hope these beds have tactile controls you can feel and use in the dark, and don't require pulling out a smartphone in front of your face while trying to sleep to adjust them, because bed/matress manufacturers for sure must know what is good and bad for sleep quality

Re: How to get root access to your Sleep Number bed

#116

Funny part to me is that I fully assumed that this was a post about hacking Eight Sleep beds by someone who didn't want to explicitly name the company, presumably for vague legal reasons. Then I got to a picture of an apparently real "Number Sleep Hub" and my mind was blown. WTF are we in a timeline so weird that there are two companies making water cooled beds, one is called Eight Sleep and the other is Sleep Number…

Sleep Number gets its name from the firmness controls on their mattress. You pick your "sleep number" and your partner picks theirs on the other side of the bed.

Re: How to get root access to your Sleep Number bed

#117
post #89

Earlier quoted context omitted.

Correct. Beds should have no network or traffic.

how do you analyze your sleeping quality and habits over time? a built in display? This reminds of the 2005: "phones shouldn't support texting. people should just call" vibes.

How do I analyze my sleep quality? I gauge how tired I am when I wake up... as man has done for eons.

Re: How to get root access to your Sleep Number bed

#118
post #4

Buried lede: “What I did find was a "convenient" backdoor that Sleep Number can use to SSH back into the hub (and my internal home network as a result).”

Devil's advocate. As someone who has developed a Linux based appliance with over 100k live units across the globe, it seems insane to NOT have access to the thing you're selling and that you have to maintain. If your thing breaks or gets bricked by an update, you will call support and expect them to fix it. You don't want to send in your device or have a support technician come to your house to fix it. So yes, to the…

And I'm sure every one of those 100k devices has a unique ssh key right?

Surely you can see the problem.

Re: How to get root access to your Sleep Number bed

#119
post #58
post #5

Wait, this is about an actual bed -- you know, the kind that you sleep on -- that runs an SSH server on Linux ? W. T. F. !?

There never was a Year of Linux on the Desktop, but there's been a year of linux on the phone, linux on the car, linux on the submarine, linux on the fridge, and so it's no surprise there's a year of linux in the bed. Anything sufficiently complex (this bed: https://en.wikipedia.org/wiki/Sleep_Number#Sleep_Number_Bed ) is going to have a microprocessor, and it makes sense to have an OS that lets you interact with it…

That is one crazy stock graph (zoom out to max):

https://www.nasdaq.com/market-activity/stocks/snbr

Bedco went up 10x during the pando.

Re: How to get root access to your Sleep Number bed

#120

Earlier quoted context omitted.

NOTHING in a bed needs to be updatable. Nothing. It needs a PIC12F509 to run a motor when you press a button and check for a jam.

How does a PIC12F509 connect via bluetooth to talk to an app for the consumer to configure things? How does it connect to wifi to talk to a server to save data to? Like it or not, an app to configure the device instead of the device having a VCR remote control to program in schedules is what consumers have gotten used to these days. If you think there's room in the market for a sleep pad that doesn't talk to the clou…

No, manufacturers have come to expect monthly revenue on top of getting paid for the hardware.
Post reply on HN