7 ms·

So either the elevator is on the same network, or they misconfigured the broadcast to all networks instead of the one needed. First one being much worse as it

So either the elevator is on the same network, or they misconfigured the broadcast to all networks instead of the one needed. First one being much worse as it shows a failure to understand network segregation.

monocasa 4y ago
Eh, the sound system on the elevator being hooked up to the guest and entertainment network isn't really a sin in my eyes.
- jvm___ 4y ago
  As long as it's segregated that way. Someone was able to gain access to their Dr's office's network by accessing the wifi-enabled fish tank thermometer. I forget if the details of how exactly they accessed it, but it was an example of an Internet of Things device making a security hole in a network.
  - duskwuff 4y ago
    It wasn't a doctor's office, it was a casino: https://www.washingtonpost.com/news/innovations/wp/2017/07/21/how-a-fish-tank-helped-hack-a-casino/ https://www.washingtonpost.com/news/innovations/wp/2017/07/2...
  - shanebellone 4y ago
    "Someone was able to gain access to their Dr's office's network by accessing the wifi-enabled fish tank thermometer" I think you're mistaken/misremembering. It was a casino. https://www.entrepreneur.com/business-news/a-casino-gets-hacked-through-a-fish-tank-thermometer/368943 https://www.entrepreneur.com/business-news/a-casino-gets-hac...
  - deleted 4y ago
    [deleted]
- jameshart 4y ago
  Until someone on the guest network starts broadcasting audio into the elevators
  - monocasa 4y ago
    To what end?
    - JUNGLEISMASSIVE 4y ago
      [dead]
    - bheadmaster 4y ago
      Chaos!
      - monocasa 4y ago
        Rain will go up, cats will chase dogs, and the elevators will play acid jazz instead of smooth jazz.
  - Salgat 4y ago
    That's more of an annoyance than a safety issue though. This is definitely one of those YAGNI things where it's not worth worrying about until it becomes a recurring issue, which is highly unlikely.
    - paisawalla 4y ago
      Personally, even the remotest possibility of someone broadcasting "evacuate your rooms, there is a fire/active shooter in the building" seems worth spending a few hours protecting against.
      - gambiting 4y ago
        ....why? No, honestly, why? Would you protect against someone running down the corridor shouting the same thing?
snickerbockers 4y ago
it's not the elevator it's, a speaker inside the elevator. nobody's hacking any elevators with this.
- gloyoyo 4y ago
  Yes, you could zap any devices near-by
malfist 4y ago
> shows a failure to understand network segregation Why? It's highly likely they just don't care. Which is fine. It's an elevator speaker.
- outworlder 4y ago
  It's also highly likely that they do not care about more things if they do not care about this. Sure it's an elevator speaker and probably you can't do much (probably! 'simple' devices are packing ever more hardware). But something is sending those packets. What's that? Can it be hacked? What else can that device/server see? Are there other devices sharing the network with customers?
anyfoo 4y ago
It's multicast, not broadcast (which means the networks could still be separated, among other things), and it's not too surprising that the network for the entertainment system carries this (by today's standard) low bandwidth stream. Yeah, with a better/better configured switch it could not reach the individual client unless it subscribed to the multicast stream, but again, who cares about that low bandwidth stream... you should not trust any hotel network anyway, those audio packets won't do extra harm.
yencabulator 4y ago
Multicast, uh, finds a way.

monocasa 4y ago

Eh, the sound system on the elevator being hooked up to the guest and entertainment network isn't really a sin in my eyes.

jvm___ 4y ago
As long as it's segregated that way. Someone was able to gain access to their Dr's office's network by accessing the wifi-enabled fish tank thermometer. I forget if the details of how exactly they accessed it, but it was an example of an Internet of Things device making a security hole in a network.
- duskwuff 4y ago
  It wasn't a doctor's office, it was a casino: https://www.washingtonpost.com/news/innovations/wp/2017/07/21/how-a-fish-tank-helped-hack-a-casino/ https://www.washingtonpost.com/news/innovations/wp/2017/07/2...
- shanebellone 4y ago
  "Someone was able to gain access to their Dr's office's network by accessing the wifi-enabled fish tank thermometer" I think you're mistaken/misremembering. It was a casino. https://www.entrepreneur.com/business-news/a-casino-gets-hacked-through-a-fish-tank-thermometer/368943 https://www.entrepreneur.com/business-news/a-casino-gets-hac...
- deleted 4y ago
  [deleted]
jameshart 4y ago
Until someone on the guest network starts broadcasting audio into the elevators
- monocasa 4y ago
  To what end?
  - JUNGLEISMASSIVE 4y ago
    [dead]
  - bheadmaster 4y ago
    Chaos!
    - monocasa 4y ago
      Rain will go up, cats will chase dogs, and the elevators will play acid jazz instead of smooth jazz.
- Salgat 4y ago
  That's more of an annoyance than a safety issue though. This is definitely one of those YAGNI things where it's not worth worrying about until it becomes a recurring issue, which is highly unlikely.
  - paisawalla 4y ago
    Personally, even the remotest possibility of someone broadcasting "evacuate your rooms, there is a fire/active shooter in the building" seems worth spending a few hours protecting against.
    - gambiting 4y ago
      ....why? No, honestly, why? Would you protect against someone running down the corridor shouting the same thing?

snickerbockers 4y ago

it's not the elevator it's, a speaker inside the elevator. nobody's hacking any elevators with this.

gloyoyo 4y ago
Yes, you could zap any devices near-by

malfist 4y ago

> shows a failure to understand network segregation Why? It's highly likely they just don't care. Which is fine. It's an elevator speaker.

outworlder 4y ago
It's also highly likely that they do not care about more things if they do not care about this. Sure it's an elevator speaker and probably you can't do much (probably! 'simple' devices are packing ever more hardware). But something is sending those packets. What's that? Can it be hacked? What else can that device/server see? Are there other devices sharing the network with customers?

anyfoo 4y ago

It's multicast, not broadcast (which means the networks could still be separated, among other things), and it's not too surprising that the network for the entertainment system carries this (by today's standard) low bandwidth stream. Yeah, with a better/better configured switch it could not reach the individual client unless it subscribed to the multicast stream, but again, who cares about that low bandwidth stream... you should not trust any hotel network anyway, those audio packets won't do extra harm.

yencabulator 4y ago

Multicast, uh, finds a way.