I stayed in a hotel with Android lightswitches and it was as bad as you'd think
mjg59.dreamwidth.org
I stayed in a hotel with Android lightswitches and it was as bad as you'd think
1–10 of 325 posts
Re: I stayed in a hotel with Android lightswitches and it was as bad as you'd think
#2prepare to be arrested for various violations as a punishment for pointing out these obvious and dangerous flaws.
Re: I stayed in a hotel with Android lightswitches and it was as bad as you'd think
#3I feel like I'm missing out on a huge bulk of money simply because when I have ideas of "Internet of Things", I cant get over the security obstacles and cancel the ideas. If only I just didn't care (or didnt know) and just implemented whatever the heck brought in money from oblivious customers.
Re: I stayed in a hotel with Android lightswitches and it was as bad as you'd think
#4This is the unfortunate outcome of a bunch of factors.
OEMs moving to XXX over TCP protocols which have zero security by default and documenting this in the datasheets.
VAR installers switching to the newer products because CAT5 cable is cheaper and easier to pull than what they used to use.
The previous solution was just as insecure but harder to hack because you needed more specialised equipment.
I'm not sure how we are going to fix this without getting the OEM industry and the industry bodies behind xxx over TCP to understand that they need to bake a security model in.
Re: I stayed in a hotel with Android lightswitches and it was as bad as you'd think
#5Turning lights on at 3 a.m. is a nuisance. Knowing when lights go on and off can tell you when the people are not in their room - which could help if you wanted to break in and steal their stuff. Overall quite disconcerting how lax they are with security.
Re: I stayed in a hotel with Android lightswitches and it was as bad as you'd think
#6Maybe it's worse: If these are really off the shelf tablets, presumably the camera can be turned on remotely. Though I'm sure the hotel would have put a piece of black tape over it, right?
Re: I stayed in a hotel with Android lightswitches and it was as bad as you'd think
#7[deleted]
Re: I stayed in a hotel with Android lightswitches and it was as bad as you'd think
#8Turning lights on at 3 a.m. is a nuisance. Knowing when lights go on and off can tell you when the people are not in their room - which could help if you wanted to break in and steal their stuff. Overall quite disconcerting how lax they are with security.
I think the implication was that some asshole can obtain photos of you sleeping by opening the curtains and switching on the lights in the middle of the night. A nuisance, sure, but also a massive violation of privacy.
Re: I stayed in a hotel with Android lightswitches and it was as bad as you'd think
#9This is the unfortunate outcome of a bunch of factors. OEMs moving to XXX over TCP protocols which have zero security by default and documenting this in the datasheets. VAR installers switching to the newer products because CAT5 cable is cheaper and easier to pull than what they used to use. The previous solution was just as insecure but harder to hack because you needed more specialised equipment. I'm not sure how w…
how we are going to fix this
Lawsuits for damages, as usual.
Re: I stayed in a hotel with Android lightswitches and it was as bad as you'd think
#10I feel like I'm missing out on a huge bulk of money simply because when I have ideas of "Internet of Things", I cant get over the security obstacles and cancel the ideas. If only I just didn't care (or didnt know) and just implemented whatever the heck brought in money from oblivious customers.
Wouldn't the way to go about this be: Create an MVP (w/out much security) - get funding for the MVP, hire security experts, get over the obstacles?