4 ms·

Every IoT device already uses esp chips, that's the only reason they can afford to make them. Them being low security doesn't matter, it's not like smart homes

by graphe 3y ago

Every IoT device already uses esp chips, that's the only reason they can afford to make them. Them being low security doesn't matter, it's not like smart homes are secure now. Security is not important to IoT devices.

jLaForest 3y ago
Esp32 is not low security: https://blog.espressif.com/esp32-s2-security-improvements-5e5453f98590 https://blog.espressif.com/esp32-s2-security-improvements-5e...
- graphe 3y ago
  It is up to the manufacturer to implement it, most esp devices like 8266 and 32 have weak security firmware, are easily hackable (benefit to me). Most don't have security in mind and don't get security updates.
  - connicpu 3y ago
    The new ESP32 models coming out, especially the RISC-V models, all have security features like Flash encryption and hardware cryptography modules. Unfortunate for those who like to reflash consumer devices.
    - sitkack 3y ago
      The chips themselves are $1 qty 1. Remove the old chip, put your unlocked chip in its place.
      - IshKebab 3y ago
        It's beyond most people's ability, equipment and effort threshold to order 1 chip from digikey (how much is delivery on that $1?) and replace a QFN package.
        AussieWog93 3y ago
        >how much is delivery on that $1? From AliExpress, it'd probably be $2-$3 including shipping. They don't ask questions when ordering large volumes of microcontrollers either.
        sitkack 3y ago
        Most people aren't going to be tearing down consumer goods and reflashing the firmware. If someone wants to get a hot air station and a bunch of $1 chips and reprogram their own devices, it would cost them less than a hundred dollars, 150 tops. Anyone can learn any skill. If you can draw anything recognizable, you can do electronics.
      - baq 3y ago
        how much is the soldering station to do that?
        stagger87 3y ago
        $100 and a steady hand :)
        connicpu 3y ago
        I got a cheap hot air station from amazon for only $40, works quite well! Maybe another $10 for solder wire and $10 for flux and you're good to go
- SV_BubbleTime 3y ago
  The chances that the popular wireless chip subsidized heavily by the CCP does not have a backdoor somewhere are too low to consider seriously. They are popular only because they are so cheap. Also, so far as chip shortage, China kept pumping them out.
kees99 3y ago
Not every... Ikea, for example, ships tons of "smart lightbulbs" with silabs/EFR32.
antoniuschan99 3y ago
That's not true anymore. There was a shift to Beken Chips a year or two ago so a lot of your Amazon WiFi iot stuff uses that now (Tuya and Tasmota). Check out OpenBeken. I can't find much info on it but thinking it's cheaper than esp's probably more similar to esp8266 than esp32. Espressif chips are much more secure nowadays compared to the esp8266 days.
- graphe 3y ago
  The beken ones don't have cheap Dev boards but I heard they are better sometimes. I don't know if they're better but DIY for them isn't so far. I don't think security is a real problem for me. Smart devices on their own intranet takes away a lot of problems.

by graphe 3y ago

jLaForest 3y ago

Esp32 is not low security: https://blog.espressif.com/esp32-s2-security-improvements-5e5453f98590 https://blog.espressif.com/esp32-s2-security-improvements-5e...

graphe 3y ago
It is up to the manufacturer to implement it, most esp devices like 8266 and 32 have weak security firmware, are easily hackable (benefit to me). Most don't have security in mind and don't get security updates.
- connicpu 3y ago
  The new ESP32 models coming out, especially the RISC-V models, all have security features like Flash encryption and hardware cryptography modules. Unfortunate for those who like to reflash consumer devices.
  - sitkack 3y ago
    The chips themselves are $1 qty 1. Remove the old chip, put your unlocked chip in its place.
    - IshKebab 3y ago
      It's beyond most people's ability, equipment and effort threshold to order 1 chip from digikey (how much is delivery on that $1?) and replace a QFN package.
      - AussieWog93 3y ago
        >how much is delivery on that $1? From AliExpress, it'd probably be $2-$3 including shipping. They don't ask questions when ordering large volumes of microcontrollers either.
      - sitkack 3y ago
        Most people aren't going to be tearing down consumer goods and reflashing the firmware. If someone wants to get a hot air station and a bunch of $1 chips and reprogram their own devices, it would cost them less than a hundred dollars, 150 tops. Anyone can learn any skill. If you can draw anything recognizable, you can do electronics.
    - baq 3y ago
      how much is the soldering station to do that?
      - stagger87 3y ago
        $100 and a steady hand :)
        connicpu 3y ago
        I got a cheap hot air station from amazon for only $40, works quite well! Maybe another $10 for solder wire and $10 for flux and you're good to go
SV_BubbleTime 3y ago
The chances that the popular wireless chip subsidized heavily by the CCP does not have a backdoor somewhere are too low to consider seriously. They are popular only because they are so cheap. Also, so far as chip shortage, China kept pumping them out.

kees99 3y ago

Not every... Ikea, for example, ships tons of "smart lightbulbs" with silabs/EFR32.

antoniuschan99 3y ago

That's not true anymore. There was a shift to Beken Chips a year or two ago so a lot of your Amazon WiFi iot stuff uses that now (Tuya and Tasmota). Check out OpenBeken. I can't find much info on it but thinking it's cheaper than esp's probably more similar to esp8266 than esp32. Espressif chips are much more secure nowadays compared to the esp8266 days.

graphe 3y ago
The beken ones don't have cheap Dev boards but I heard they are better sometimes. I don't know if they're better but DIY for them isn't so far. I don't think security is a real problem for me. Smart devices on their own intranet takes away a lot of problems.