Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I found a backdoor into my bed

trufflesecurity.com

Post reply on HN
Print view View original

31–40 of 403 posts

Re: I found a backdoor into my bed

#31

Post by moolcool »

EvanAnderson wrote: post #3

The state of the product's security wasn't unexpected. I was, however, shocked by this part: > I was willing to overlook: > The bed costs $2,000 > It won’t function if the internet goes down > Basic features are behind an additional $19/mo subscription > The bed’s only controls are via mobile app Nothing about this bed should depend on off-site servers. Nothing about the product should necessitate a subscription fee.…

I wonder if there'd be a cottage industry for new control boards which de-shittify IOT devices but keep their functionality. Like buy the bed, and then buy a little pre-programmed ESP32 logic board to replace the factory board.

Re: I found a backdoor into my bed

#32

Post by xg15 »

EvanAnderson wrote: post #3

The state of the product's security wasn't unexpected. I was, however, shocked by this part: > I was willing to overlook: > The bed costs $2,000 > It won’t function if the internet goes down > Basic features are behind an additional $19/mo subscription > The bed’s only controls are via mobile app Nothing about this bed should depend on off-site servers. Nothing about the product should necessitate a subscription fee.…

In addition to everything else, also love how a bed with the express purpose to increase sleep quality requires you to open your phone every time you want to adjust a setting.

Re: I found a backdoor into my bed

#33

Post by hinkley »

EvanAnderson wrote: post #3

The state of the product's security wasn't unexpected. I was, however, shocked by this part: > I was willing to overlook: > The bed costs $2,000 > It won’t function if the internet goes down > Basic features are behind an additional $19/mo subscription > The bed’s only controls are via mobile app Nothing about this bed should depend on off-site servers. Nothing about the product should necessitate a subscription fee.…

I think one would also assume that some fraction of that $2000 would go into a fund to keep those servers up.

One thing SaaS has not learned from nonprofits with longevity: you do big fund raisers to get money so you can live on the interest payments. If you think of a new project that will increase your burn rate, you throw another fund raiser.

Figure out how many of those beds you expect to be junked for breakage or obsolescence each year and set your margins to keep the long tail running for 10-15 years.

Re: I found a backdoor into my bed

#36

Post by mikepurvis »

moolcool wrote: post #31
EvanAnderson wrote: post #3

The state of the product's security wasn't unexpected. I was, however, shocked by this part: > I was willing to overlook: > The bed costs $2,000 > It won’t function if the internet goes down > Basic features are behind an additional $19/mo subscription > The bed’s only controls are via mobile app Nothing about this bed should depend on off-site servers. Nothing about the product should necessitate a subscription fee.…

I wonder if there'd be a cottage industry for new control boards which de-shittify IOT devices but keep their functionality. Like buy the bed, and then buy a little pre-programmed ESP32 logic board to replace the factory board.

Probably could never make that kind of thing work at scale, but maybe as something within the maker community, perhaps adjacent to the world of 3d printing, Arduino, and RPi.

Re: I found a backdoor into my bed

#37

Post by cthalupa »

xg15 wrote: post #32
EvanAnderson wrote: post #3

The state of the product's security wasn't unexpected. I was, however, shocked by this part: > I was willing to overlook: > The bed costs $2,000 > It won’t function if the internet goes down > Basic features are behind an additional $19/mo subscription > The bed’s only controls are via mobile app Nothing about this bed should depend on off-site servers. Nothing about the product should necessitate a subscription fee.…

In addition to everything else, also love how a bed with the express purpose to increase sleep quality requires you to open your phone every time you want to adjust a setting.

The newer models have a touch control panel on the side. Different taps to adjust settings.

Not that this ameliorates all the other issues here.

Re: I found a backdoor into my bed

#38

Post by neogodless »

WalterBright wrote: post #34

I've bought several internet radio streaming devices over the years, and they all eventually brick when the server goes out of business.

I was so pleasantly surprised when my Microsoft / Harman Kardon "smart" speaker (Invoke) issued a firmware update upgrading it to act as a simple Bluetooth speaker. It's wildly more useful now!

A rare exception to the usual.

Re: I found a backdoor into my bed

#39

Post by LordShredda »

j2kun wrote: post #20

> While the Eight Sleep CEO Matteo seems focused on providing DOGE with great sleep More sycophants coming out of the woodwork.

It's him and that mattress guy, and the whole stereotype of mattress stores being money laundering fronts. What's up with the bed industry in general?
Post reply on HN