Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I found a backdoor into my bed

trufflesecurity.com

Post reply on HN
Print view View original

271–280 of 403 posts

Re: I found a backdoor into my bed

#271

Post by BizarroLand »

kotaKat wrote: post #268
bloopernova wrote: post #78

My wife uses a Bedjet which has both a remote and app. Thankfully it works without an active Internet connection. It uses a bag-like sheet that it blows air into, to adjust temperature. For women suffering* through menopause, being able to adjust around hot/cold flushes is sanity-preserving! * Some women don't suffer much during perimenopause or menopause, but it's a process that seriously fucks with one's hormones.…

I love my BedJet. The app is absolute jank though and really dated, and I didn't get the remote with mine. If you're running HomeAssistant and you want better controls, grab a spare ESP32 and run the ESPHome BedJet integration. https://esphome.io/components/climate/bedjet.html (A little ironic you need an external ESP32 to talk to the internal ESP32 that is the BedJet's guts...)

Geez. I had this idea myself a long time ago. Glad to see it's a real thing, good on them for making it!

Re: I found a backdoor into my bed

#272

Post by mynameisash »

thatfrenchguy wrote: post #220
nicoburns wrote: post #181

Earlier quoted context omitted.

One might argue that the market itself becomes "stupid" (stops accurately indicating value) when people have so much money that they stop caring about how they spend it.

Anyone who has risen through social classes knows that poorer people use their money much more wisely than richer people :)

I don't think you're wrong, but I know people who grew up poor and blow money on stupid shit -- or at least unnecessary purchases (eg, upgrading to every single new iPhone).

OTOH, I grew up upper-middle class, my dad being quite frugal and a big DIYer. Similarly, I make good money and am also very frugal. I have no reason to flaunt money around my peers.

Re: I found a backdoor into my bed

#273

Post by drawkward »

EvanAnderson wrote: post #3

The state of the product's security wasn't unexpected. I was, however, shocked by this part: > I was willing to overlook: > The bed costs $2,000 > It won’t function if the internet goes down > Basic features are behind an additional $19/mo subscription > The bed’s only controls are via mobile app Nothing about this bed should depend on off-site servers. Nothing about the product should necessitate a subscription fee.…

>The market is clearly too stupid to vote against the rent seeking tech industry

looks at DOGE

Yep.

Re: I found a backdoor into my bed

#274

Post by mrWiz »

lblume wrote: post #123
mrWiz wrote: post #115

Earlier quoted context omitted.

I've got a cube that's hooked into my Home Assistant setup that works similarly. Flipping the cube upside down turns my bedside light on or off, rotating it clockwise increases the brightness, and counterclockwise decreases it.

How exactly does it communicate these changes, if I might ask?

kolektiv's parallel comment explains it perfectly.

Re: I found a backdoor into my bed

#275

Post by WalterBright »

optymizer wrote: post #152
WalterBright wrote: post #34

I've bought several internet radio streaming devices over the years, and they all eventually brick when the server goes out of business.

Offtopic: I grew up in a tiny post-soviet third world country. Aside from the usual daily struggles, one lesser known aspect of that life is that we did not have access to primary sources of information or the people who invented the things we were using. We only had a book in my native language on Pascal. I had heard of C from a magazine that had a CD with a C compiler on it, and I walked into a library wanting to l…

> Walter Bright on HN like he's a real human being

He was replaced by a D-9000 AI bot about 6 years ago. He was jeopardizing the mission.

Re: I found a backdoor into my bed

#276

Post by bloopernova »

steve_adams_86 wrote: post #262
bloopernova wrote: post #78

My wife uses a Bedjet which has both a remote and app. Thankfully it works without an active Internet connection. It uses a bag-like sheet that it blows air into, to adjust temperature. For women suffering* through menopause, being able to adjust around hot/cold flushes is sanity-preserving! * Some women don't suffer much during perimenopause or menopause, but it's a process that seriously fucks with one's hormones.…

My wife has been suffering with perimenopause tremendously. Her hormonal fluctuations have caused hair loss, severe insomnia, and mood swings that seriously degrade the quality of her life. It's hard to watch. There's no magic trick to fix it, and she isn't doing anything 'wrong' that she should change.

If she hasn't started taking progesterone and estrogen, I recommend she talk to a doctor about doing that. Good luck, it's hard on both of you and I hope it gets better soon.

Re: I found a backdoor into my bed

#277

Post by goalieca »

nadis wrote: post #2

"When I say backdoor, what am I referring to? Sure, Eight Sleep needs a way to push updates, provide service, and offer support. That’s expected. What goes too far in my opinion, is allowing all of Eight Sleep’s engineers to remotely SSH into every customer’s bed and run arbitrary code that bypasses all forms of formal code review process. And yes, I found evidence that this is exactly what’s happening." ^ wow, this…

> What goes too far in my opinion, is allowing all of Eight Sleep’s engineers to remotely SSH into every customer’s bed and run arbitrary code that bypasses all forms of formal code review process.

More companies do this than not.

Re: I found a backdoor into my bed

#278

Post by hinkley »

BobaFloutist wrote: post #190
hinkley wrote: post #55

Earlier quoted context omitted.

I’m still fairly upset that ambient devices never really took off. Nanoleaf at least made a remote like this. It’s a dodecahedron with an accelerometer, so you can program each face with a different setting. The simplest being to program opposing faces for two different light levels. You want to take a nap, turn the controller upside down.

That sounds cool, but I'm a little resistant to being asked to remember to charge my lightswitch.

That's unfortunately a big part of why mine is dead. The batteries are hard to get to. Also their iOS app is frustrating to use.

Re: I found a backdoor into my bed

#279

Post by lilyball »

hn_acc1 wrote: post #210
lilyball wrote: post #173

Earlier quoted context omitted.

It's not actually a bed, it's a mattress cover. They are willing to sell you a mattress with it if you want, but the product itself is designed to go over your existing mattress. That said, good-quality beds cost money!

Wait - it's $2000 just for a mattress cover? You still need to spend $1k+ for frame + mattress?

Well, you probably already have a bed, no? And if you don't, there are lots of different types of mattresses out there and you may have preferences.

As for frame, if you buy the Eight Sleep Pod 4 Ultra (which is the version that comes with a base that adds head/foot elevation control), you can use the base as a bedframe if you like, though that would be pretty minimalistic.

If this product was an entire bed then it would actually be a lot less appealing because it means you have to replace your bed to use it. It's not a bed, it's a mattress cover (and optional base with the Ultra), so it's purely additive on top of your existing bed, and does not significantly alter the feel of your mattress (besides temperature).

Re: I found a backdoor into my bed

#280

Post by lijok »

steve_adams_86 wrote: post #266
lijok wrote: post #138

Earlier quoted context omitted.

*subjectively. Once you realize just how important quality sleep is, and how much this can help, $20/month bed subscription becomes a laughably small price to pay.

What I don't understand is things like: - What's required to justify this cost? - How many features and updates does the app require? - What could the ongoing server costs be? - How many people maintain the software? I've built some IoT projects and handling events from the hardware was remarkably inexpensive. Piping tiny telemetric packets, even at a high frequency, was no big deal. It wouldn't justify charging cust…

Indeed, it’s about what consumers are willing to pay, not what it costs to produce. It’s called value-based pricing.
Post reply on HN