3 ms·
Indeed, but will a non-tecnical user know that. It's been of increasing frequency non-technical users ask for disks to be wiped though, they are aware it contai
by newaccoutnas 8y ago
Indeed, but will a non-tecnical user know that. It's been of increasing frequency non-technical users ask for disks to be wiped though, they are aware it contains sensitive information... but a light bulb? Maybe no lightbulb moment for them.
- ce4 8y agoI don't know how to properly address this without wiping. Maybe not use wifi for the bulbs in the first place or not use IoT at all? Consumers will not care about that. Either you trust the lightbulb provider to protect your creds better or don't use it. In my opinion the lifx is reasonably protected and far from being the worst offender here: the attack doesnt work over the air, and depends on physical access to a pre-setup bulb and involves physical labour to access the credentials (needs cutting out the board, removing protecting glue from the board, dumping firmware). This is not really mass-exploitable. Services like wigle will allow to see where the wifi is located though, but the bar for attacking is pretty high. Have a look here for really awfull IoT sec: https://mjg59.dreamwidth.org/40397.html https://mjg59.dreamwidth.org/40397.html
- newaccoutnas 8y agoWhat are world we live in where we have to put trust in our lightbulb provider
- jnty 8y agoGiven that bulbs have always been electrical devices capable of malfunctioning and burning our house down, we have been living in it for decades.