3 ms·
Why not post the link to the original article? https://limitedresults.com/2019/01/pwn-the-lifx-mini-white/ https://limitedresults.com/2019/01/pwn-the-lifx-mini-
by close04 8y ago
Why not post the link to the original article? https://limitedresults.com/2019/01/pwn-the-lifx-mini-white/ https://limitedresults.com/2019/01/pwn-the-lifx-mini-white/
The comments there also shed some light on how they can be improved.
- mnw21cam 8y agoAaand is it me, or is the image at the top of that article reflected?
- e12e 8y agoI mean, that wifi password is available is obvious. But wonder if this'll allow third part firmware updates? (it'saa little unclear what the cert is for) : "Vulnerability n*3: Root certificate and RSA private key extracted Root certificate and RSA private key are present into the firmware and are used to connect to LIFX cloud." Then again, without any security at all, maybe firmware isn't signed at all anyway..