The attack vector is weird. Having LIFX bulbs personally, I’m going to notice if you steal one of my light bulbs pretty quickly. I’m also going to assume that

The attack vector is weird. Having LIFX bulbs personally, I’m going to notice if you steal one of my light bulbs pretty quickly. I’m also going to assume that the vast majority of LIFX bulbs are in private residences. I highly doubt any high security areas are using WiFi connected light bulbs. In that case you can probably just ask to use my or really most people’s Wifi, rather than destroying our $30 light bulbs. Honestly I would prefer you did. This is really a case where social engineering is almost guaranteed to be quicker and easier. Also correct me if I’m wrong here but once he had shell access into the device, could he not just use the WiFi via the device anyway? Why does it matter that it’s plain text. Also also, isn’t plain text WiFi credentials pretty standard? That’s how basically every Linux-y WiFi connected toy I own does it. It’s how all my raspberry pi’s are set up...