15 ms·

The method to get into "God Mode" is the same, except now it prompts you for a code. Someone has figured out how to calculate it and actually created a website

The method to get into "God Mode" is the same, except now it prompts you for a code. Someone has figured out how to calculate it and actually created a website to generate codes for you. http://getresponsecode.com http://getresponsecode.com Apparently the algorithm is very simple according to Reddit https://old.reddit.com/r/nordictrack/comments/ozkp8v/privileged_mode_patched/hoazr1z/?context=3 https://old.reddit.com/r/nordictrack/comments/ozkp8v/privile... >long responseCode = new Random((long) Integer.parseInt(iFitCode)).nextInt(999999); It's not a perfect workaround, as it resets on the next boot, but I've seen that people are installing apps such as Taskbar which float overtop the iFit app and start on boot, allowing you to still launch your apps like Netflix etc even without God Mode enabled. It's only a matter of time before Nordic decides to block this method as well. We should also be looking into how to block updates to these devices.

vuldin 5y ago
This is great, thanks for posting this site. I am one of those who bought this awesome treadmill for several reasons, including to watch netflix and plex. It's been frustrating not being able to easily do this... I have just been listening to podcasts from my phone.
ncann 5y ago
Normally you can block any device's update if you figure out the server for the update content/update check, and block it out from your router and/or DNS.
- EvanAnderson 5y ago
  The "solution" for that will be embedded 5G connections.
  - konschubert 5y ago
    That would work equally well with LTE. It's not happening because it would increase cost.
    - seanp2k2 5y ago
      "Luckily" in the US, the carrier oligopoly here won't sell you a cheap IoT plan for cell connectivity, and the "lifetime" plans sold to manufacturers are probably at least $50-100 in volume.
    - pjerem 5y ago
      Oh no, in fact, it’s just around the corner. https://aws.amazon.com/fr/private5g/ https://aws.amazon.com/fr/private5g/
      - jitl 5y ago
        Private 5G is like an alternative to wifi for a large industrial complex or something. No one is going to cover your house in it. You should be more worried about Sidewalk. https://www.amazon.com/Amazon-Sidewalk/b?ie=UTF8&node=21328123011 https://www.amazon.com/Amazon-Sidewalk/b?ie=UTF8&node=213281...
        chana_masala 5y ago
        Can you explain further?
    - fragmede 5y ago
      Maybe not on optional treadmills, but that's already here for CPAP machines that insurance pays for - they log data to an SD card in case you don't have reception, but it also has an LTE modem to upload it so the insurance company can check up on you and make sure you're using that machine, or else charge you more money for it.
  - seanp2k2 5y ago
    The remedy for that will be wrapping the internal antenna in foil or cell tower emulation.
    - Retr0id 5y ago
      The remedy for that will be requiring a network handshake to occur on boot.
      - fknorangesite 5y ago
        And when wintertime rolls around, the gorillas simply freeze to death.
      - Dylan16807 5y ago
        At that point it should be easy to return, at least.
      - chris_wot 5y ago
        At which point, you tell them you have no coverage and get a refund.
      - fragmede 5y ago
        The remedy for that is to emulate the server The remedy for that is to encrypt the communication The remedy for that is to MITM the server connection The remedy for that is HSTS... It's a cat a mouse game, the better solution for society (imo) is to have specific rights enshrined by law to allow for a qualified 3rd parties to access a system's internals.
        Arnavion 5y ago
        The one advantage of playing the cat-and-mouse game is that the longer it goes on, the more complexity ends up being in the firmware (TLS, HPKP, etc as you already listed), which increases the likelihood of a bug that can be exploited to take over it.
        5y ago
  - huhtenberg 5y ago
    The "solution" is to allow the device use only "official" resolver servers, accessed via encrypted channel, secured by a PKI with a private root.
  - rckoepke 5y ago
    Amazon sidewalk, actually. Should prove cheaper and work near any sense housing.
  - nvr219 5y ago
    I put all my gym equipment in a faraday cage
  - charles_f 5y ago
    First covid then gym equipment, 5G is the worst
dmosley 5y ago
Surely one can just block the update service via something like a pihole? I do this for my Vizio TV. They're notorious, as as most smart TVs now, for calling home and everywhere else.
mst 5y ago
> It's only a matter of time before Nordic decides to block this method as well. Maaaybe. The public statement from them sounds like it was legal whining about liability issues, and if that's actually true (which, well) then if it has to be sufficiently intentional on your part that may be sufficient for them to leave well alone. Certainly worth preparing for that not being the case though.
- IshKebab 5y ago
  Yeah or that's just the excuse they use to justify blocking access so more people subscribe to their services.
  - mst 5y ago
    That's what "if that's actually true" was about, yes.
- seanp2k2 5y ago
  IANAL, but are there any actual cases where someone or a class successfully sued a company for using their product off-label in such a way? This kind of stuff seems to me like how schools no longer permit students to go out for lunch, citing liability that they almost assuredly never had in the first place.
  - pc86 5y ago
    I can at least see the argument that tapping the screen a couple times in a certain pattern might not be sufficient, but having to generate a code is. I think it's a ridiculous argument, but I wouldn't be even remotely shocked that some octogenarian judge who doesn't own a cell phone is convinced by it.
    - mst 5y ago
      Right, and legal departments kind of exist to avoid that sort of ridiculous argument fucking over their employers. I don't endorse the argument -logically- at all, but if it's "legal being (justifiably) paranoid" then while as I said preparing for that not being it is still worthwhile, the extent to which they'll chase down workarounds may have limits nonetheless.
fnord77 5y ago
I know this is terrible for consumers, but I'm endlessly amused by all the hacks and workarounds in this game of cat and mouse.
igetspam 5y ago
Thank you! I love the hardware but I'm pissed about the software. This is helpful.
vishvananda 5y ago
Thank you for this. I was hoping someone had figured it out but I hadn't found this yet.
floatingatoll 5y ago
DHCP advertise an http proxy to it with a PAC file and block non-proxy communications. It should do the right thing eventually, at which point you can catalogue the usual traffic exchanges and then block anything not in them and/or just the software update URLs (which requires inspection over time, as there may be many).

vuldin 5y ago

This is great, thanks for posting this site. I am one of those who bought this awesome treadmill for several reasons, including to watch netflix and plex. It's been frustrating not being able to easily do this... I have just been listening to podcasts from my phone.

ncann 5y ago

Normally you can block any device's update if you figure out the server for the update content/update check, and block it out from your router and/or DNS.

EvanAnderson 5y ago
The "solution" for that will be embedded 5G connections.
- konschubert 5y ago
  That would work equally well with LTE. It's not happening because it would increase cost.
  - seanp2k2 5y ago
    "Luckily" in the US, the carrier oligopoly here won't sell you a cheap IoT plan for cell connectivity, and the "lifetime" plans sold to manufacturers are probably at least $50-100 in volume.
  - pjerem 5y ago
    Oh no, in fact, it’s just around the corner. https://aws.amazon.com/fr/private5g/ https://aws.amazon.com/fr/private5g/
    - jitl 5y ago
      Private 5G is like an alternative to wifi for a large industrial complex or something. No one is going to cover your house in it. You should be more worried about Sidewalk. https://www.amazon.com/Amazon-Sidewalk/b?ie=UTF8&node=21328123011 https://www.amazon.com/Amazon-Sidewalk/b?ie=UTF8&node=213281...
      - chana_masala 5y ago
        Can you explain further?
  - fragmede 5y ago
    Maybe not on optional treadmills, but that's already here for CPAP machines that insurance pays for - they log data to an SD card in case you don't have reception, but it also has an LTE modem to upload it so the insurance company can check up on you and make sure you're using that machine, or else charge you more money for it.
- seanp2k2 5y ago
  The remedy for that will be wrapping the internal antenna in foil or cell tower emulation.
  - Retr0id 5y ago
    The remedy for that will be requiring a network handshake to occur on boot.
    - fknorangesite 5y ago
      And when wintertime rolls around, the gorillas simply freeze to death.
    - Dylan16807 5y ago
      At that point it should be easy to return, at least.
    - chris_wot 5y ago
      At which point, you tell them you have no coverage and get a refund.
    - fragmede 5y ago
      The remedy for that is to emulate the server The remedy for that is to encrypt the communication The remedy for that is to MITM the server connection The remedy for that is HSTS... It's a cat a mouse game, the better solution for society (imo) is to have specific rights enshrined by law to allow for a qualified 3rd parties to access a system's internals.
      - Arnavion 5y ago
        The one advantage of playing the cat-and-mouse game is that the longer it goes on, the more complexity ends up being in the firmware (TLS, HPKP, etc as you already listed), which increases the likelihood of a bug that can be exploited to take over it.
        5y ago
- huhtenberg 5y ago
  The "solution" is to allow the device use only "official" resolver servers, accessed via encrypted channel, secured by a PKI with a private root.
- rckoepke 5y ago
  Amazon sidewalk, actually. Should prove cheaper and work near any sense housing.
- nvr219 5y ago
  I put all my gym equipment in a faraday cage
- charles_f 5y ago
  First covid then gym equipment, 5G is the worst

dmosley 5y ago

Surely one can just block the update service via something like a pihole? I do this for my Vizio TV. They're notorious, as as most smart TVs now, for calling home and everywhere else.

mst 5y ago

> It's only a matter of time before Nordic decides to block this method as well. Maaaybe. The public statement from them sounds like it was legal whining about liability issues, and if that's actually true (which, well) then if it has to be sufficiently intentional on your part that may be sufficient for them to leave well alone. Certainly worth preparing for that not being the case though.

IshKebab 5y ago
Yeah or that's just the excuse they use to justify blocking access so more people subscribe to their services.
- mst 5y ago
  That's what "if that's actually true" was about, yes.
seanp2k2 5y ago
IANAL, but are there any actual cases where someone or a class successfully sued a company for using their product off-label in such a way? This kind of stuff seems to me like how schools no longer permit students to go out for lunch, citing liability that they almost assuredly never had in the first place.
- pc86 5y ago
  I can at least see the argument that tapping the screen a couple times in a certain pattern might not be sufficient, but having to generate a code is. I think it's a ridiculous argument, but I wouldn't be even remotely shocked that some octogenarian judge who doesn't own a cell phone is convinced by it.
  - mst 5y ago
    Right, and legal departments kind of exist to avoid that sort of ridiculous argument fucking over their employers. I don't endorse the argument -logically- at all, but if it's "legal being (justifiably) paranoid" then while as I said preparing for that not being it is still worthwhile, the extent to which they'll chase down workarounds may have limits nonetheless.

fnord77 5y ago

I know this is terrible for consumers, but I'm endlessly amused by all the hacks and workarounds in this game of cat and mouse.

igetspam 5y ago

Thank you! I love the hardware but I'm pissed about the software. This is helpful.

vishvananda 5y ago

Thank you for this. I was hoping someone had figured it out but I hadn't found this yet.

floatingatoll 5y ago

DHCP advertise an http proxy to it with a PAC file and block non-proxy communications. It should do the right thing eventually, at which point you can catalogue the usual traffic exchanges and then block anything not in them and/or just the software update URLs (which requires inspection over time, as there may be many).