Earlier quoted context omitted.
Don't blame the market. Blame the engineers who know the risks of such foolishness that lack the courage and conviction to stand up to decision makers.
The market deserves some blame here.
[deleted]
I found a backdoor into my bed
111–120 of 403 posts
Re: I found a backdoor into my bed
#112Earlier quoted context omitted.
I've also heard people are having excellent sleep in their traditional modern beds. Me included.
I've also heard about people finding new foam mattresses too hot :( like me. will buy a spring mattress next time Edit thank you for your recommendation but I'm in italy, European and American mattresses are quite different. Before discovering this, I once wrote to the customer support of the flamingo hotel, Las Vegas, because I loved their mattress: Hi, i do think that what i'm gonna write is weird, but anyway haha.…
While going with a non-foam mattress will be colder than a foam mattress, if you were interested in a colder foam then I'd like to recommend latex mattresses. They're more expensive than memory foam and they feel different but I no longer overheat at night. Also I sleep better knowing my bed has proper kerning.
Re: I found a backdoor into my bed
#113I'm a two-time Eight Sleep customer and the CEO could post my sleep history specifically with my full name and I'd still use it. It's really comfortable. I think most of the detractors were never remotely in the market for such a product. Everything negative said about the product and the company is true, and they should do better, but it's not enough to scare me away thanks to how good the base product is.
If there was a similar product that does not upload any of your extremely personal data, like whether you're now in your bed, to some server on the internet, would you prefer it?
Sure, there are lots of ways it can be improved. I'd like it to be cheaper too. I'd be happy to switch to an alternative that is just as good but without the Internet nonsense, but SleepMe isn't it. I've got my eyes open for viable competitors for the next time I need to outfit a mattress or when this one dies. For now, Eight Sleep is the best one I've found.
Re: I found a backdoor into my bed
#114Earlier quoted context omitted.
I wonder if there'd be a cottage industry for new control boards which de-shittify IOT devices but keep their functionality. Like buy the bed, and then buy a little pre-programmed ESP32 logic board to replace the factory board.
As an EE, there's a healthy amount of this in some industries with very high costs, equipment use beyond manufacturer obsolescence, and in hobby circles with technical enthusiasts. But not generic devices for the general population. At my day job, we've replaced and re-engineered controllers in industrial laser cutters, CNCs, welders, robots, and similar equipment. There are replacement control boards for hobbyist st…
Likewise, I've looked into this after being asked to build retrofit electronics for both expensive machine tools and consumer goods (I had a client who was adding bill acceptors to massage chairs and other items). I was never able to find a niche with a consistent need. They do exist but are hard to find.
Re: I found a backdoor into my bed
#115Earlier quoted context omitted.
In addition to everything else, also love how a bed with the express purpose to increase sleep quality requires you to open your phone every time you want to adjust a setting.
I’m still fairly upset that ambient devices never really took off. Nanoleaf at least made a remote like this. It’s a dodecahedron with an accelerometer, so you can program each face with a different setting. The simplest being to program opposing faces for two different light levels. You want to take a nap, turn the controller upside down.
I've got a cube that's hooked into my Home Assistant setup that works similarly. Flipping the cube upside down turns my bedside light on or off, rotating it clockwise increases the brightness, and counterclockwise decreases it.
Re: I found a backdoor into my bed
#116I'm not sure about the latest models, but my early-revision BedJet has no smart features at all: it was all bluetooth. It solves much the same problem as the product here: warm/cool the bed, not the house.
Re: I found a backdoor into my bed
#117The state of the product's security wasn't unexpected. I was, however, shocked by this part: > I was willing to overlook: > The bed costs $2,000 > It won’t function if the internet goes down > Basic features are behind an additional $19/mo subscription > The bed’s only controls are via mobile app Nothing about this bed should depend on off-site servers. Nothing about the product should necessitate a subscription fee.…
There is no amount of consumer choices and consumer "activism" that can fix these issues. They are ineffective by design.
Re: I found a backdoor into my bed
#118This is a bunch of nonsense, assumption and leaping to conclusions without evidence. "In the second screenshot, we have the public key that’s authorized to access the device. The email address attached to the public key, eng@eightsleep.com, to me suggests the private key is likely accessible to the entire engineering team." He has no evidence for this whatsoever and not really any good reason to assume it either. "In…
Are you denying the existence of an authorised ssh key on each of these beds allowing the holder of the key? Are you denying there is a config file pointing to a target called remote-connectivity-api.8slp.net? No there's not enough evidence to prove in a court of law who has access to the private key, or that the config file is enabling a return ssh connection, but it's pretty damning. The only thing that's not newsw…
> Are you denying there is a config file pointing to a target called remote-connectivity-api.8slp.net?
Under the path ".ssh.endpoint", too. It's not like it's just a mystery hostname; it clearly has something to do with SSH.
> The only thing that's not newsworthy about this is that large amounts of IOT shit does this.
And - just to be clear - that doesn't mean it shouldn't be reported on! Talking about this stuff, and having concrete, specific examples, is good.
Re: I found a backdoor into my bed
#119The state of the product's security wasn't unexpected. I was, however, shocked by this part: > I was willing to overlook: > The bed costs $2,000 > It won’t function if the internet goes down > Basic features are behind an additional $19/mo subscription > The bed’s only controls are via mobile app Nothing about this bed should depend on off-site servers. Nothing about the product should necessitate a subscription fee.…
Software is devil-is-in-the-details to the extreme, and maximally opaque even to programmer-capable consumers, much less general consumers. And all tech companies are now founded with zero regard for good behavior. I mean, they don't even do minimal amounts of customer service, which is the bare minimum of having regard for your customers. In general, the IoT industry has suffered and adopters get burned over and ove…
> but I'm not sure those regulations cover information security
They most certainly do. I'm deep into a security analysis of a similar device rn.
Re: I found a backdoor into my bed
#120Earlier quoted context omitted.
But is it more comfortable, then say, an old school analog expensive mattress? I can’t shake the feeling these companies are selling snake oil (that is not to say that old school analog mattresses aren’t overpriced either)
You may be misunderstanding the product--it's a topper that goes on top of your existing mattress. It doesn't replace the mattress. I do indeed have it on top of an old school analog expensive mattress. It cools/warms to the desired temperature without impacting the comfort from the mattress. I don't think there's much room for snake oil here: it pumps cooled or heated water through the mattress topper. There's no my…
So it's a fancy mattress topper with a water pump for $2k.