Live data from Hacker News

I found a backdoor into my bed

trufflesecurity.com

341–350 of 403 posts

Re: I found a backdoor into my bed

#342
I got one of those indoor gardening systems. We thought we had an issue with them. Contacted support.

Support checked and it was fine. Just needed time to adjust. They mentioned they checked the cameras (!).

Later on I got a second used one and while cleaning it, noticed that the internals are just a raspberry pi. Took my micro HDMI and keyboard, and... this thing just runs Raspberry Pi OS.

No updates. And ... VNC. People from that company can just remote into my device, look at what the cameras are seeing, and do stuff on my network. These things are a security nightmare.

Re: I found a backdoor into my bed

#343

> For someone who suffers from insomnia this seemed worth a shot. I can relate, having suffered the same for most of my life. One thing that really helped me was a simple white noise machine, typically used to help babies sleep. Good: I sleep great with it. Also, it's not connected to the internet and doesn't require an app. Bad: I basically can't sleep without it. I have to travel with it (camping!). I even purchase…

White noise machine: FM radio tuned to an empty frequency.

Very low tech, very cheap, very secure, very effective.

Re: I found a backdoor into my bed

#344

I got one of those indoor gardening systems. We thought we had an issue with them. Contacted support. Support checked and it was fine. Just needed time to adjust. They mentioned they checked the cameras (!). Later on I got a second used one and while cleaning it, noticed that the internals are just a raspberry pi. Took my micro HDMI and keyboard, and... this thing just runs Raspberry Pi OS. No updates. And ... VNC. P…

I'd love to have a robot vacuum but all I checked last time had wifi connectivity and advanced sensors to build accurate map of our home uploaded to an app of my phone with who knows what capabilities. Some even had camera. All they missed some mic to listen in on us, however since some are connected to Alexa that is a wish fulfilled for many.

- Alexa, wipe up that spill in the bedroom.

- Sorry, that requires deep clean, but you had some credit left on your second credit card so I ordeered a deep clening service for Tuesday when you are away.

Re: I found a backdoor into my bed

#345

I got one of those indoor gardening systems. We thought we had an issue with them. Contacted support. Support checked and it was fine. Just needed time to adjust. They mentioned they checked the cameras (!). Later on I got a second used one and while cleaning it, noticed that the internals are just a raspberry pi. Took my micro HDMI and keyboard, and... this thing just runs Raspberry Pi OS. No updates. And ... VNC. P…

I'd love to have a robot vacuum but all I checked last time had wifi connectivity and advanced sensors to build accurate map of our home uploaded to an app of my phone with who knows what capabilities. Some even had camera. All they missed some mic to listen in on us, however since some are connected to Alexa that is a wish fulfilled for many. - Alexa, wipe up that spill in the bedroom. - Sorry, that requires deep cl…

Some of these vacuums will work without the Wi-Fi. You will have to do without automatic features, for example you have to push the button every time to get it to start, but if you just want it to do the whole area it will run and return to base. It's enough for my area

Re: I found a backdoor into my bed

#346

Earlier quoted context omitted.

Yikes, does the hub have some kind of unauthenticated http server exposed to the LAN? Yet another reason I run open source software rather than buying the proprietary hubs.

I kind of remember just connecting to the MAC of the lightbulb itself by finding it on my routers table and then plugging in the info to his script. You could change colors too by passing little JSON strings. Maybe things are different now as this was in maybe 2018ish

It probably would've been using the bridge's HTTP API. You likely authenticated by pushing the button on the bridge.

The lightbulbs themselves only have a Zigbee radio (and Bluetooth, but not in 2018). They communicate with the LAN via the wired bridge.

https://developers.meethue.com/develop/get-started-2/#

Re: I found a backdoor into my bed

#347

> For someone who suffers from insomnia this seemed worth a shot. I can relate, having suffered the same for most of my life. One thing that really helped me was a simple white noise machine, typically used to help babies sleep. Good: I sleep great with it. Also, it's not connected to the internet and doesn't require an app. Bad: I basically can't sleep without it. I have to travel with it (camping!). I even purchase…

Me too. Tried all the things. No improvement.

Turns out most of my anxiety, insomnia, etc sensations were caused by pinched spinal nerves.

I say sensation because I believe, but cannot prove, that my physical sensation led to my mental state. Most diagnosis assume the reverse; that mental state leads to physical symptoms (restlessness, clinching, pit-in-stomach, whatever). I have not yet read anything or met anyone (care providers) supporting my hunch.

So... Anyone experiencing treatment resistent pinched nerves, eg sciatica pain, may want to consider possible physical causes.

In my case, it was collapsing vertebrae due to osteoporosis resolved with a S1-L5-L4 lumbar fusion. Yes, that surgery and recovery was very difficult. The upside is I now often sleep like a corpse. It's glorious.

YMMV.

Re: I found a backdoor into my bed

#348
post #98

> In the end, I got enough of the cyber ick, I decided to seek a simpler, less internet-connected solution to my temperature-controlled bed needs. Great line. And my eyes bugged out a little at this part as I also realized what the implications were: > - They can know when you sleep > - They can detect when there are 2 people sleeping in the bed instead of 1 > - They can know when it’s night, and no people are in the…

Just wait until you hear about Wi-Fi sensing.

https://www.technologyreview.com/2024/02/27/1088154/wifi-sen...

Re: I found a backdoor into my bed

#349

I got one of those indoor gardening systems. We thought we had an issue with them. Contacted support. Support checked and it was fine. Just needed time to adjust. They mentioned they checked the cameras (!). Later on I got a second used one and while cleaning it, noticed that the internals are just a raspberry pi. Took my micro HDMI and keyboard, and... this thing just runs Raspberry Pi OS. No updates. And ... VNC. P…

I'd love to have a robot vacuum but all I checked last time had wifi connectivity and advanced sensors to build accurate map of our home uploaded to an app of my phone with who knows what capabilities. Some even had camera. All they missed some mic to listen in on us, however since some are connected to Alexa that is a wish fulfilled for many. - Alexa, wipe up that spill in the bedroom. - Sorry, that requires deep cl…

Your robot vacuum is basically a mobile camera all your neighbors can access

https://www.abc.net.au/news/2024-10-11/robot-vacuum-yells-ra...

Re: I found a backdoor into my bed

#350

I got one of those indoor gardening systems. We thought we had an issue with them. Contacted support. Support checked and it was fine. Just needed time to adjust. They mentioned they checked the cameras (!). Later on I got a second used one and while cleaning it, noticed that the internals are just a raspberry pi. Took my micro HDMI and keyboard, and... this thing just runs Raspberry Pi OS. No updates. And ... VNC. P…

which brand and model?
Post reply on HN