361–370 of 403 posts
before anyone tries to mock me for mentioning EMF: https://pmc.ncbi.nlm.nih.gov/articles/PMC5247706/
I got one of those indoor gardening systems. We thought we had an issue with them. Contacted support. Support checked and it was fine. Just needed time to adjust. They mentioned they checked the cameras (!). Later on I got a second used one and while cleaning it, noticed that the internals are just a raspberry pi. Took my micro HDMI and keyboard, and... this thing just runs Raspberry Pi OS. No updates. And ... VNC. P…
Which indoor garden? Was thinking about some but want to make sure to avoid this company
Total aside: it’s illegal for any company to provide goods or services for free to the government, so the Pod CEO would be breaking the law sending DOGE employees bed pods. It’s basically seen as a bribe - which is true! These beds are $2000 each but it’s pretty cheap for favorable regulatory treatment after a small donation. :/
Also: citation needed. A quick Google says it's not illegal as long as the government entity confirms it in writing.
Earlier quoted context omitted.
I've also heard about people finding new foam mattresses too hot :( like me. will buy a spring mattress next time Edit thank you for your recommendation but I'm in italy, European and American mattresses are quite different. Before discovering this, I once wrote to the customer support of the flamingo hotel, Las Vegas, because I loved their mattress: Hi, i do think that what i'm gonna write is weird, but anyway haha.…
Have you tried a more firm foam mattress? I had similar sentiments about foam mattresses but they were all the type where you just feel like you're sinking into the foam.
Total aside: it’s illegal for any company to provide goods or services for free to the government, so the Pod CEO would be breaking the law sending DOGE employees bed pods. It’s basically seen as a bribe - which is true! These beds are $2000 each but it’s pretty cheap for favorable regulatory treatment after a small donation. :/
He'll say that DOGE is not part of the government but a private endeavor by Elon Musk. Also: citation needed. A quick Google says it's not illegal as long as the government entity confirms it in writing.
Earlier quoted context omitted.
> Are you denying there is a config file pointing to a target called remote-connectivity-api.8slp.net? Under the path ".ssh.endpoint", too. It's not like it's just a mystery hostname; it clearly has something to do with SSH. > The only thing that's not newsworthy about this is that large amounts of IOT shit does this. And - just to be clear - that doesn't mean it shouldn't be reported on! Talking about this stuff, an…
"I downloaded the firmware and I found an SSH key and a configuration file that mentions an SSH endpoint; therefore, I know that all of Eight Sleep’s engineers are allowed to remotely SSH into every customer’s bed and run arbitrary code!" Do you not see a problem with this line of reasoning? That's literally what he says in the article, and he presents it as a near-certainty, not the wild leap of unsupported reasonin…
> In the end, I got enough of the cyber ick, I decided to seek a simpler, less internet-connected solution to my temperature-controlled bed needs. Great line. And my eyes bugged out a little at this part as I also realized what the implications were: > - They can know when you sleep > - They can detect when there are 2 people sleeping in the bed instead of 1 > - They can know when it’s night, and no people are in the…
The people who care about security don't buy cloud-connected bed heaters – or run their own software on their IoT devices. You'll have exactly zero ad revenue because there is no overlap between prospective buyers and people who care about security.
1. Work in tech
2. Do care about security
I think this product in particular really attracts the tech nerd life optimizer types.
And this is why I have any device that needs connectivity to the Internet to function in its own vlan with very specific and oppressive rules about what can talk with what. If you don't have a fancy router, use your guest network for these things.
I hate this future.
"When I say backdoor, what am I referring to? Sure, Eight Sleep needs a way to push updates, provide service, and offer support. That’s expected. What goes too far in my opinion, is allowing all of Eight Sleep’s engineers to remotely SSH into every customer’s bed and run arbitrary code that bypasses all forms of formal code review process. And yes, I found evidence that this is exactly what’s happening." ^ wow, this…
You’d be surprised at how many hardware companies think this is a good idea! I’m the founder and CEO of a company called Memfault, we make observability SaaS for hardware companies. I constantly get asked if we could just offer a remote access solution. Many of our competitors do! But we think it’s (a) a huge security liability and (b) too ripe for abuse. But fundamentally consumers do not care, and until that change…
The state of the product's security wasn't unexpected. I was, however, shocked by this part: > I was willing to overlook: > The bed costs $2,000 > It won’t function if the internet goes down > Basic features are behind an additional $19/mo subscription > The bed’s only controls are via mobile app Nothing about this bed should depend on off-site servers. Nothing about the product should necessitate a subscription fee.…
One can just question how we want to live our lives in the future. Behind each and every step a subscription? And all of them seem to be priced 10-20/month, no matter how much value they provide.