I found a backdoor into my bed
trufflesecurity.com
I found a backdoor into my bed
1–10 of 403 posts
Re: I found a backdoor into my bed
#2"When I say backdoor, what am I referring to? Sure, Eight Sleep needs a way to push updates, provide service, and offer support. That’s expected.
What goes too far in my opinion, is allowing all of Eight Sleep’s engineers to remotely SSH into every customer’s bed and run arbitrary code that bypasses all forms of formal code review process.
And yes, I found evidence that this is exactly what’s happening."
^ wow, this is pretty wild.
Re: I found a backdoor into my bed
#3The state of the product's security wasn't unexpected. I was, however, shocked by this part:
> I was willing to overlook:
> The bed costs $2,000
> It won’t function if the internet goes down
> Basic features are behind an additional $19/mo subscription
> The bed’s only controls are via mobile app
The market is clearly too stupid to vote against the rent seeking tech industry. It makes me so sad.
Re: I found a backdoor into my bed
#4[deleted]
Re: I found a backdoor into my bed
#5The state of the product's security wasn't unexpected. I was, however, shocked by this part: > I was willing to overlook: > The bed costs $2,000 > It won’t function if the internet goes down > Basic features are behind an additional $19/mo subscription > The bed’s only controls are via mobile app Nothing about this bed should depend on off-site servers. Nothing about the product should necessitate a subscription fee.…
Conspicuous consumption drives a lot of irrational behavior
Re: I found a backdoor into my bed
#6The state of the product's security wasn't unexpected. I was, however, shocked by this part: > I was willing to overlook: > The bed costs $2,000 > It won’t function if the internet goes down > Basic features are behind an additional $19/mo subscription > The bed’s only controls are via mobile app Nothing about this bed should depend on off-site servers. Nothing about the product should necessitate a subscription fee.…
I've heard the sleep people get with this is excellent, but no way in hell am I paying a subscription and requiring an internet connection for my bed. The entire concept is just absurd. If it sells, it sells, I guess.
Re: I found a backdoor into my bed
#7Using the aquarium chillers is really smart! Just need someone to mfg the mattress membrane covers.
Re: I found a backdoor into my bed
#8[flagged]
Re: I found a backdoor into my bed
#9Um, is that Bezos or the AWS account of the company?
Alas, our hope to recover whatever social benefit was in SpaceX and Tesla is with Bezos's companies, although at least the EV space is more diverse. SpaceX cannot be wrested from Musk and TSLA and its board is preferred-stock controlled by Musk.
Re: I found a backdoor into my bed
#10The state of the product's security wasn't unexpected. I was, however, shocked by this part: > I was willing to overlook: > The bed costs $2,000 > It won’t function if the internet goes down > Basic features are behind an additional $19/mo subscription > The bed’s only controls are via mobile app Nothing about this bed should depend on off-site servers. Nothing about the product should necessitate a subscription fee.…
Don't blame the market.
Blame the engineers who know the risks of such foolishness that lack the courage and conviction to stand up to decision makers.