3 ms·
Assuming the only reason this works is because the washing machine and app don’t use TLS 1.2 and instead some homegrown Caesar cipher? Otherwise, you would nee
by firesteelrain 1y ago
Assuming the only reason this works is because the washing machine and app don’t use TLS 1.2 and instead some homegrown Caesar cipher?
Otherwise, you would need some MitM style attack?
- timedout_uk 1y agoThe washing machine doesn't use TLS at all and instead opts to just XOR data, explained later in the post.
- firesteelrain 1y agoI understand. I was saying how this could have been avoided by the manufacturer
- ethan_smith 1y agoMany of these consumer IoT devices use either plaintext protocols or implement weak encryption with hardcoded keys in the firmware, making packet capture and analysis possible without traditional MitM techniques.
- firesteelrain 1y agoI understand. I am asking whether if the certs were in the device and the app would this have fixed it