Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I found a backdoor into my bed

trufflesecurity.com

Post reply on HN
Print view View original

221–230 of 403 posts

Re: I found a backdoor into my bed

#221

Post by westmeal »

mvanbaak wrote: post #157
connicpu wrote: post #148

Earlier quoted context omitted.

I agree with this so much. Opening an app is the last thing I want to do to adjust something while I'm in bed. I have a zigbee lightswitch so I can turn the light off from bed, and sure I could open an app to do that, but it's so much better to get a zigbee button and stick it to the wall above my head and program it to control the lightswitch. Unlike all the cloud garbage, my zigbee devices continue to function even…

Totally agree. I got a philips hue dimmer switch for next to the bed. One of the best things I got for the home automation. Just click it and everything in the house goes into night mode. no phone needed.

My room mate had one of these and I found out there was a script online someone put together on github I think to control it over a shell. Was hilarious because I kept turning off their light at weird times.

Re: I found a backdoor into my bed

#222

Post by knallfrosch »

TheGRS wrote: post #98

> In the end, I got enough of the cyber ick, I decided to seek a simpler, less internet-connected solution to my temperature-controlled bed needs. Great line. And my eyes bugged out a little at this part as I also realized what the implications were: > - They can know when you sleep > - They can detect when there are 2 people sleeping in the bed instead of 1 > - They can know when it’s night, and no people are in the…

The people who care about security don't buy cloud-connected bed heaters – or run their own software on their IoT devices. You'll have exactly zero ad revenue because there is no overlap between prospective buyers and people who care about security.

Re: I found a backdoor into my bed

#223

Post by jimt1234 »

> For someone who suffers from insomnia this seemed worth a shot.

I can relate, having suffered the same for most of my life. One thing that really helped me was a simple white noise machine, typically used to help babies sleep. Good: I sleep great with it. Also, it's not connected to the internet and doesn't require an app. Bad: I basically can't sleep without it. I have to travel with it (camping!). I even purchased a backup in case the primary fails, which has happened.

The other major sleep improvement was putting effort into accepting that life is pretty great; all of my worries that kept me awake at night were overblown. This took actual work, but it paid off.

Anyway, just thought I'd pass that along, hoping it might help someone else that struggles with sleep.

https://www.amazon.com/Yogasleep-Portable-Soothing-Rechargea...

Re: I found a backdoor into my bed

#224

Post by knallfrosch »

xg15 wrote: post #32
EvanAnderson wrote: post #3

The state of the product's security wasn't unexpected. I was, however, shocked by this part: > I was willing to overlook: > The bed costs $2,000 > It won’t function if the internet goes down > Basic features are behind an additional $19/mo subscription > The bed’s only controls are via mobile app Nothing about this bed should depend on off-site servers. Nothing about the product should necessitate a subscription fee.…

In addition to everything else, also love how a bed with the express purpose to increase sleep quality requires you to open your phone every time you want to adjust a setting.

You can buy the new 3249€ Pod4: "Control without a phone" https://www.eightsleep.com/eu/product/pod-cover/

Re: I found a backdoor into my bed

#225

Post by bloopernova »

zemvpferreira wrote: post #204
bloopernova wrote: post #78

My wife uses a Bedjet which has both a remote and app. Thankfully it works without an active Internet connection. It uses a bag-like sheet that it blows air into, to adjust temperature. For women suffering* through menopause, being able to adjust around hot/cold flushes is sanity-preserving! * Some women don't suffer much during perimenopause or menopause, but it's a process that seriously fucks with one's hormones.…

My friend Sara had a rare form of breast cancer at 34. Thankfully she survived, but to improve her odds of staying alive she's been essentially put into permanent menopause for the next decade. Constant hot flashes. Is the Bedjet really that good? Would your wife recommend it without reservations? Are there any other product that have made a difference for her? Apologies if that's intrusive but improving Sara's sleep…

Yes, my wife would recommend it without reservations.

There's also a cold water circulator, useful for icing a painful limb etc. https://www.amazon.com/gp/aw/d/B09VRJ153X

Not intrusive at all, I hope your friend can find some relief. I hope she can find strength and joy in life.

Re: I found a backdoor into my bed

#226

Post by chpatrick »

hinkley wrote: post #33
EvanAnderson wrote: post #3

The state of the product's security wasn't unexpected. I was, however, shocked by this part: > I was willing to overlook: > The bed costs $2,000 > It won’t function if the internet goes down > Basic features are behind an additional $19/mo subscription > The bed’s only controls are via mobile app Nothing about this bed should depend on off-site servers. Nothing about the product should necessitate a subscription fee.…

I think one would also assume that some fraction of that $2000 would go into a fund to keep those servers up. One thing SaaS has not learned from nonprofits with longevity: you do big fund raisers to get money so you can live on the interest payments. If you think of a new project that will increase your burn rate, you throw another fund raiser. Figure out how many of those beds you expect to be junked for breakage o…

If they sell one a month for $2000 that would be enough to keep the lights on with a sensible backend setup.

Re: I found a backdoor into my bed

#227

Post by doublerabbit »

perching_aix wrote: post #160
doublerabbit wrote: post #122

Earlier quoted context omitted.

So now your getting hacked and breathing in toxins while you sleep. Hacked up the arse and in the mouth too. Nice. Yeah, no thanks. I try to make my bedroom as technology free as possible. Apart from a digital alarm clock; at night I put my phone on aeroplane mode and place it outside my closed bedroom door. It's the best I can do with today's bullshit tech. I've never had a problem with not having a cold bed, so may…

Toxins? What?

Why else is there plastic in your brain? How do you think you make "cold"?

when cold leaks, it can be toxic.

Re: I found a backdoor into my bed

#228

Post by [deleted] »

bovinegambler wrote: post #218
TheGRS wrote: post #98

> In the end, I got enough of the cyber ick, I decided to seek a simpler, less internet-connected solution to my temperature-controlled bed needs. Great line. And my eyes bugged out a little at this part as I also realized what the implications were: > - They can know when you sleep > - They can detect when there are 2 people sleeping in the bed instead of 1 > - They can know when it’s night, and no people are in the…

Mozilla does something like that, privacy reviews of consumer products: https://foundation.mozilla.org/en/privacynotincluded/

[deleted]

Re: I found a backdoor into my bed

#229

Post by beala »

zemvpferreira wrote: post #216
beala wrote: post #211

Earlier quoted context omitted.

I'd love to be wrong about this, but I'm very skeptical that the aquarium chiller pictured in the post can move enough heat to cool a human. As mentioned in the article, it uses thermoelectric coolers which are extremely inefficient. I see at least one aquarium chiller on amazon that uses a compressor, but then you have to wonder if it's quiet enough to sleep next to.

Same, though I've seen thermoelectric chillers of that size moving ~200 Watt and a human produces less than 100 Watt at rest. The ones I saw on Amazon for $150 claimed to move around 70 Watt which is ballpark useful. You wouldn't want to cool down to a very low temperature anyway, just remove the heat you produce yourself.

Good point. That does sound plausible then. Here's my napkin math after some quick googling:

- A human produces about 40 watts of heat while sleeping.

- Thermoelectric coolers have a coefficient of performance (CoP) between 0.3-0.6. So for every watt consumed, they can move 0.3-0.6 watts of heat.

- The wattage consumed and moved all needs to be dissipated.

This random chiller [0] on amazon consumes 100 watts, so perhaps this could move 60 watts max. CoP drops as the temperature difference increases. And it's unclear if the unit can dissipate 160 watts steady state.

But it could plausibly keep you from heating up on a warm night. It doesn't seem like there's much margin for actually cooling you down tho. If someone wanted to experiment with this, I'd definitely read that post.

[0] https://www.amazon.com/MOQNISE-Aquarium-Circulation-Function...

Post reply on HN