4 ms·

So, if an attacker is already physically on your network, and they trigger a firmware update on the lightbulb, and they have modified your router's DNS to reque

So, if an attacker is already physically on your network, and they trigger a firmware update on the lightbulb, and they have modified your router's DNS to request a malicious site, AND they have set up a rogue firmware server likely on your own network, AND they have crafted a malicious firmware for your smart lightbulb... ...they can install a malicious firmware on your smart lightbulb that will forward them your wifi password? The horror, the horror.

RoyTyrell 9y ago
At a glance it seems like a making a mountain out of a mole hill, for sure. However let's say some unscroupulous person puts together a little device and anrdoid app, sells it to would-be criminals. For some amount of money they can buy a device that can try to brute force break into a home network, unlock the doors and perhaps even turn off a security system. Insurance would cover your stolen items but you're still fucked temporarily, and maybe longer if they were able to steal info to commit identity theft. Granted they could just smash a window too but this might be easier and make less noise.