Earlier quoted context omitted.
Welcome Time Travellers! This is 2023 where you can find yourself locked out of your toothbrush after too many failed password attempts.
I hope that this is a warning to time travelers from the past and not a friendly welcome to time travelers from the future that are looking back on simpler times.
Hacking my “smart” toothbrush
51–60 of 311 posts
Re: Hacking my “smart” toothbrush
#52Great article, the most interesting part of which is that you can lock your self out of your toothbrush head after three wrong password attempts. I didn't dig into the data sheet for the NFC chip very deeply, but I imagine that it's just the default that the chip ships with. Or maybe Philips really wants that $25 for a new toothbrush head. :-) EDIT: nope, not the default. From the data sheet, last sentence: "To preve…
Welcome Time Travellers! This is 2023 where you can find yourself locked out of your toothbrush after too many failed password attempts.
Re: Hacking my “smart” toothbrush
#53This was an enjoyable read. My GE fridge uses RFID for keeping track of when to change the water filter. This isn't really an area I'm familiar with but I'm curious how much I would be able to figure out with the right tools.
Re: Hacking my “smart” toothbrush
#54This was an enjoyable read. My GE fridge uses RFID for keeping track of when to change the water filter. This isn't really an area I'm familiar with but I'm curious how much I would be able to figure out with the right tools.
In GE's defense, limiting the amount of time you can use a water filter for is probably a good idea considering what the filter media fills up with if you do nothing.
Re: Hacking my “smart” toothbrush
#55Re: Hacking my “smart” toothbrush
#56Earlier quoted context omitted.
Welcome Time Travellers! This is 2023 where you can find yourself locked out of your toothbrush after too many failed password attempts.
I hope that this is a warning to time travelers from the past and not a friendly welcome to time travelers from the future that are looking back on simpler times.
This type of deviant behavior came to a screeching halt when Crest released their breath-activated toothbrush defense system (BATDS) in 2028. BATDS enabled devices deliver a non-lethal shock to the perpetrator, rendering them unconscious. While BATDS was immediately deemed illegal in most countries due to disputed claims that it caused significant brain damage throughout a large control group, it remains popular in single family households in the US.
Re: Hacking my “smart” toothbrush
#57I'm curious to see, but I don't think the algorithm for calculating the password from the identifier would be very sophisticated. Assuming they didn't want to add costs to prevent easy retrieval of any secret key from the device, a complex algorithm would be kind of a waste.
I mean, even something as simple as `md5("very-long-secret-only-phillips-knows" + uid)[:4]` would be effectively unguessable. Not hard if you have the code for the firmware, but nigh-impossible otherwise.
Re: Hacking my “smart” toothbrush
#58Great article, the most interesting part of which is that you can lock your self out of your toothbrush head after three wrong password attempts. I didn't dig into the data sheet for the NFC chip very deeply, but I imagine that it's just the default that the chip ships with. Or maybe Philips really wants that $25 for a new toothbrush head. :-) EDIT: nope, not the default. From the data sheet, last sentence: "To preve…
Welcome Time Travellers! This is 2023 where you can find yourself locked out of your toothbrush after too many failed password attempts.
Re: Hacking my “smart” toothbrush
#59I'd like to skip the whole "smart" toothbrush phase and go straight to the "smart ass" toothbrush, which razzes me about my sugar intake and gossips with the toaster behind my back.
Re: Hacking my “smart” toothbrush
#60Earlier quoted context omitted.
Why is this kind of thing legal? For starters, my experience says that, unlike an HP printer, your toothbrush still works just fine[0] if you ignore anything that tells you to replace the head. [0] At least as fine as a toothbrush with a worn-out head is going to work.
I don't really mean about the toothbrush. I mean, why is it legal for NXP to make chips that permanently brick instead of just factory resetting when too many wrong passwords are tried?