Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

How to get root access to your Sleep Number bed

dillan.org

Post reply on HN
Print view View original

121–130 of 254 posts

Re: How to get root access to your Sleep Number bed

#121

Post by binwiederhier »

jtriangle wrote: post #118
binwiederhier wrote: post #53

Earlier quoted context omitted.

Devil's advocate. As someone who has developed a Linux based appliance with over 100k live units across the globe, it seems insane to NOT have access to the thing you're selling and that you have to maintain. If your thing breaks or gets bricked by an update, you will call support and expect them to fix it. You don't want to send in your device or have a support technician come to your house to fix it. So yes, to the…

And I'm sure every one of those 100k devices has a unique ssh key right? Surely you can see the problem.

Not just that's they have

- per session ssh keys that are valid for only 6 hours

- all ssh sessions are audit logged and have to go through jump servers tied to tech roles

- all sessions fully monitored via "script" and can be replayed

You can also see a write-up here: https://news.ycombinator.com/item?id=40840040

Re: How to get root access to your Sleep Number bed

#122

Post by labster »

sodality2 wrote: post #24
PontifexMinimus wrote: post #21

Earlier quoted context omitted.

> Sounds like the problem isn't Linux, it's insecure development practices. No, it's making devices "smart". There doesn't need to be a wifi-connected computer inside a washing machine, cooker, or fridge. In fact all these things can run without a computer in them at all, and they're arguably better for it.

The reason is demand. There's nothing wrong with a smart device (even one you find to be useless) if it's secure. Just.. don't use its smart features. I of course agree with you principally, I don't want smart devices, but it's not very malicious to have a sleep number bed sitting unconnected...

It’s not always demand. Lots of people don’t want smart TVs, but that’s too bad. The smart TVs are subsidized to manufacture because the software can put more advertising on, which makes it a supply-side issue.

Re: How to get root access to your Sleep Number bed

#123

Post by labster »

dylan604 wrote: post #40
reidjs wrote: post #7

Earlier quoted context omitted.

At least it doesn't run windows

"man, i tried going to bed last night, but it was a BSOD so I had to reboot it, but then it needed 45 minutes of OS updates before I could get in the bed." seems like a pretty good torture on multiple levels

And they wonder why so many people are sleeping on the streets these days. It’s just better UX.

Re: How to get root access to your Sleep Number bed

#125

Post by dailykoder »

pfych wrote: post #110
dyauspitr wrote: post #102

Earlier quoted context omitted.

What fresh hell is that. Why does it need to reach out to the internet?

To ensure you've paid your monthly subscription fee (Not joking - the mattress cover has a subscription)

What. The. Fuck. Why would anyone buy such thing then? I really don't get it.

Re: How to get root access to your Sleep Number bed

#126

Post by FactKnower69 »

fragmede wrote: post #91
dmitrygr wrote: post #11

Earlier quoted context omitted.

NOTHING in a bed needs to be updatable. Nothing. It needs a PIC12F509 to run a motor when you press a button and check for a jam.

How does a PIC12F509 connect via bluetooth to talk to an app for the consumer to configure things? How does it connect to wifi to talk to a server to save data to? Like it or not, an app to configure the device instead of the device having a VCR remote control to program in schedules is what consumers have gotten used to these days. If you think there's room in the market for a sleep pad that doesn't talk to the clou…

>Like it or not, an app to configure the device instead of the device having a VCR remote control to program in schedules is what consumers have gotten used to these days.

No?? When was the last time you spoke to another human being about this topic? Has any other person in your life seriously told you that they like having to download a smartphone app to set up their soundbar? Have you managed to fully insulate yourself from the broader world with a circle of dead-eyed freaks that gleefully spend their free nights registering their appliances online and reading end-user license agreements?

Re: How to get root access to your Sleep Number bed

#127

Post by danparsonson »

fragmede wrote: post #91
dmitrygr wrote: post #11

Earlier quoted context omitted.

NOTHING in a bed needs to be updatable. Nothing. It needs a PIC12F509 to run a motor when you press a button and check for a jam.

How does a PIC12F509 connect via bluetooth to talk to an app for the consumer to configure things? How does it connect to wifi to talk to a server to save data to? Like it or not, an app to configure the device instead of the device having a VCR remote control to program in schedules is what consumers have gotten used to these days. If you think there's room in the market for a sleep pad that doesn't talk to the clou…

I conjecture that mass market consumers have come to expect this because it's been pushed down their throats for the last ten years by rampant rent-seeking. Who is really asking for an internet-connected bed for goodness' sake??

Re: How to get root access to your Sleep Number bed

#128

Post by danparsonson »

itake wrote: post #89
dmitrygr wrote: post #77

Earlier quoted context omitted.

Correct. Beds should have no network or traffic.

how do you analyze your sleeping quality and habits over time? a built in display? This reminds of the 2005: "phones shouldn't support texting. people should just call" vibes.

We're not talking about different modes off communication, we're talking about adding communication to a "device" that doesn't need it.

Re: How to get root access to your Sleep Number bed

#129

Post by danparsonson »

sodality2 wrote: post #24
PontifexMinimus wrote: post #21

Earlier quoted context omitted.

> Sounds like the problem isn't Linux, it's insecure development practices. No, it's making devices "smart". There doesn't need to be a wifi-connected computer inside a washing machine, cooker, or fridge. In fact all these things can run without a computer in them at all, and they're arguably better for it.

The reason is demand. There's nothing wrong with a smart device (even one you find to be useless) if it's secure. Just.. don't use its smart features. I of course agree with you principally, I don't want smart devices, but it's not very malicious to have a sleep number bed sitting unconnected...

> The reason is demand

Induced demand.

Re: How to get root access to your Sleep Number bed

#130

Post by [deleted] »

thfuran wrote: post #32
itake wrote: post #10

Earlier quoted context omitted.

what would be a better way to design this that is cheap and updatable? Specialized hardware is riskier to build, b/c bugs would require a complete reprint.

Why would I want so much software in my bed that even makes sense to discuss updating it?

[deleted]
Post reply on HN