Live data from Hacker News

Anyone on the Internet Can Ring Your Doorbell

abgeo.dev

51–60 of 93 posts

Re: Anyone on the Internet Can Ring Your Doorbell

#52

Can you actually access any of the doorbells on the internet with this? It reads to me like you need physical access to extract the signing keys etc over the debug port before you can actually impersonate the device

I think the distinction is: physical access helps bootstrap the research, but the resulting key/signing logic is not device-specific

Re: Anyone on the Internet Can Ring Your Doorbell

#54
post #13

Earlier quoted context omitted.

You should probably get a cheap IoT camera to keep an eye on that printer!

And then bug a camera to monitor the first camera

Exactly. All my IoT stuff is on it's own wifi network and VLAN because I don't trust the initial or long term security of some of these manufacturers.

Re: Anyone on the Internet Can Ring Your Doorbell

#55
post #34

That would be impressive as my doorbell is hardwired from a button to a transformer and bell in a closet.

This is a security concern as well. I'd argue even worse than the internet connected ones. Anyone at your front door (or where the button is) can easily know if you're at home, and take advantage if you're not. With the internet connected ones, you can always pretend.

From my experience with package delivery I can tell you this is not how it works. Press the button, door doesn't open that instance, ergo no one is home.

My home office is in the other end of the house, it takes ~20-30 seconds for me to get to the door. That is more time than UPS grants you.

Re: Anyone on the Internet Can Ring Your Doorbell

#56
post #5

Earlier quoted context omitted.

I have a poe reolink camera doorbell that I am yet to install...

I've got the Reolink PoE doorbell and it works great!

Me too.

You can put it on a separate VLAN with no internet access and watch it via your own app eg Home Assistant, Frigate, Zoneminder or whatever.

Re: Anyone on the Internet Can Ring Your Doorbell

#58
post #56

Earlier quoted context omitted.

I've got the Reolink PoE doorbell and it works great!

Me too. You can put it on a separate VLAN with no internet access and watch it via your own app eg Home Assistant, Frigate, Zoneminder or whatever.

I have a Reolink but haven't got to Home Assistant yet. I'm happy switching to that, but for less technical (though still digital savvy) spouses - how would you say the switch would be for them?

Re: Anyone on the Internet Can Ring Your Doorbell

#59

That would be impressive as my doorbell is hardwired from a button to a transformer and bell in a closet.

Since i like tech, once i was also interested in a smart doorbell or lock. My wife very much disliked the idea, because she thought it could prevent us to even enter our own house when the tech fails.

Then one day i watched my neighbour trying to get into his own house, because his smart lock and doorbell system failed horribly. This took several hours. It started raining. I learned a lot of new swear words from my neighbours wife which were directed to her husband.

Once again, my wife was totally right :)

Re: Anyone on the Internet Can Ring Your Doorbell

#60

I wonder how I would feel about that, if I was alone at home, and lonely. Would it cheer me that people were reaching out and ringing my doorbell? Or would it make me sad because I would be reminded that there was not a friend ringing at the door?

Or an even worse idea: What if ads started ringing your doorbell suddenly?
Post reply on HN