Practical engineer in me screams: SIMPLIFY, SIMPLIFY, SIMPLIFY.
Just plug the washing machine into a smartplug and alert when power draw drops to idle for more than X minutes.
I hacked my washing machine
21–30 of 169 posts
Re: I hacked my washing machine
#22Practical engineer in me screams: SIMPLIFY, SIMPLIFY, SIMPLIFY. Just plug the washing machine into a smartplug and alert when power draw drops to idle for more than X minutes.
but where's the fun in that :P
Re: I hacked my washing machine
#23Earlier quoted context omitted.
How isolated are we talking? A device that only has access to the internet can still get botnetted and send malicious traffic from your IP. Or burn your data cap, or spy on you for the vendor.
But the comment said "I wouldn't allow it on my local network", not "I wouldn't allow it on the Internet".
LAN is being used in an under specified way. To my reading, a separate VLAN or standalone LAN for the washing machine wouldn’t be on “my (main/primary LAN is assumed here) local network” if I mean that “my local network” doesn’t have untrusted devices on it. I tend to read these kinds of comments with a bit of wiggle room because sometimes folks disagree about if VLANs are actually isolated enough to consider them separate local networks, as the same device may do routing and firewall or VLAN tagging, so there is isolation in principle, but bad actors can’t be expected to comply with network security policies.
I guess I can see how each of you could be right to their own reading.
Re: I hacked my washing machine
#24Respect, but this is kinda the hard way - I just plugged mine (dumb machine, not smart) in via an energy metering plug, and when energy use drops to less than 10W for more than 2 minutes, it’s done - very simple homeassistant automation. Convenient for me as the machine is 500m from the house.
This is what I do - when the washer finishes, a light turns on in the kitchen letting us know. Then, when the dryer has drawn power for 10 seconds, the light turns back off, because that’s a good indication that someone dealt with the wet laundry. (Sometimes things get out of sync but not often!)
Re: I hacked my washing machine
#25Re: I hacked my washing machine
#26Earlier quoted context omitted.
But the comment said "I wouldn't allow it on my local network", not "I wouldn't allow it on the Internet".
LAN is being used in an under specified way. To my reading, a separate VLAN or standalone LAN for the washing machine wouldn’t be on “my (main/primary LAN is assumed here) local network” if I mean that “my local network” doesn’t have untrusted devices on it. I tend to read these kinds of comments with a bit of wiggle room because sometimes folks disagree about if VLANs are actually isolated enough to consider them se…
I agree otherwise, but they said "even in isolation", which removes the ambiguity.
Re: I hacked my washing machine
#27Practical engineer in me screams: SIMPLIFY, SIMPLIFY, SIMPLIFY. Just plug the washing machine into a smartplug and alert when power draw drops to idle for more than X minutes.
Our previous washing machine had a mechanical rotating switch, sort of like an egg timer, built into it. I seriously thought about just gluing a pair of metal bits onto it to make a physical connection when it was done, which would either do something clever like trigger a RasPi into sending me a text, or something stupid like physically triggering a doorbell chime.
Re: I hacked my washing machine
#28Unless you are using a rooted Android, putting your own certificates on your phone is annoying. They need to be in the system certificate store which is, as far as I know, only possible with a Magisk module.
An easier way is to run an Android virtual device with an older Android version on your computer. You can then use some scripts to add the certificates and proxy the traffic to Burpsuite or mitmproxy. That way you also don't have to switch devices.
It would also be interesting to use APKLab or Jadx to look at the code of the app. Maybe you can find the key derivation algorithm. The app and the washing machine must somehow generate keys or have pre-shared secrets.
If I understand correctly, the app only works if both devices are in the same network? I like that
Re: I hacked my washing machine
#29I did something with my Bosch washing machine (not like the OP). My washing machine is at the other end of the house from my home office. Sometimes I would put a load of washing on, and despite setting an alarm, might forget (perhaps I am in an important meeting etc).
So I decided to solve it.
Using the Bosch API - I can tell both when a cycle is complete, and if the door is open. Currently I use their default version, but there is a local hosted option I'll be switching too now the proof of concept works.
So using Home Assistant I have a simple script that detects when a washing machine cycle is complete AND the door has NOT been opened. This implies my washing machine has wet clothes still in it.
So Home Assistant will alert my phone (and my wife only if she is home based upon presence detection) once every 15mins that there are wet clothes waiting in the washing machine.
Very simple - works perfectly.
Re: I hacked my washing machine
#30Practical engineer in me screams: SIMPLIFY, SIMPLIFY, SIMPLIFY. Just plug the washing machine into a smartplug and alert when power draw drops to idle for more than X minutes.
My washing machine also makes a stupid chime melody thing. A microphone that listens for it would also be a simple way to do it.