Triple Flaw in Nest's Dropcam

Re:Triple Flaw in Nest's Dropcam by coldcode on Sunday March 26, 2017 @03:36PM (#13962700)

The first two are simply embarrassing. Google paid 3 Billion for this stuff? Does anyone do QA any more? Especially for a device you use for a security purpose, you'd think bugs like this would be not only found, but designed to not happen in the first place.

[ Parent | on HN ]

Re:Triple Flaw in Nest's Dropcam by ThrowawayR2 on Sunday March 26, 2017 @06:20PM (#13963658)

> Does anyone do QA any more?

-QA pays much less, even for technically demanding roles like embedded systems SDET.

-There's little to no career growth for QA.

-QA is the first to be let go during layoffs.

-Developers routinely trash-talk QA people.

And, thus, it should hardly be a surprise that teams keep releasing products that cause people to ask "Does anyone do QA any more?"

[ Parent | on HN ]

Re:Triple Flaw in Nest's Dropcam by stevenwoo on Sunday March 26, 2017 @03:52PM (#13962816)

I live near the Nest main office on Foothill Expressway. There used to be a signficant amount of cars there on the weekends. That is no longer true.

[ Parent | on HN ]

Re:Triple Flaw in Nest's Dropcam by tblair on Sunday March 26, 2017 @04:15PM (#13962982)

I know you're implying that they don't care anymore, but I think over-working leads to fatigue and rush jobs/corner cutting, which is a great way to end up with security flaws.

[ Parent | on HN ]

Re:Triple Flaw in Nest's Dropcam by bitmapbrother on Sunday March 26, 2017 @08:23PM (#13964227)

That's because Tony Fadell made them work on the weekends. If you're forcing your employees to work on the weekends, on a regular basis, then something is very wrong - which probably explains why he's no longer at Nest.

[ Parent | on HN ]

Re:Triple Flaw in Nest's Dropcam by yuhong on Sunday March 26, 2017 @04:01PM (#13962874)

This reminds me of these Twitter threads:

https://twitter.com/yuhong2/status/829072680389267456

https://twitter.com/yuhong2/status/832053404553744385

https://twitter.com/yuhong2/status/844049570640285696

(Ryan Hurst joined Google around the time they split Nest into Alphabet)

[ Parent | on HN ]

Re:Triple Flaw in Nest's Dropcam by asafira on Sunday March 26, 2017 @05:38PM (#13963454)

Yes, Google paid the entirety of 3 billion dollars for specifically the lines of code that are vulnerable.

Sigh. Clickbait article, "Read"-bait comment.

[ Parent | on HN ]

Re:Triple Flaw in Nest's Dropcam by setr on Sunday March 26, 2017 @08:52PM (#13964322)

> "Read"-bait comment. Can't think of a good wordplay but it's more 'upvote'-baiting imo

[ Parent | on HN ]

Re:Triple Flaw in Nest's Dropcam by asafira on Monday March 27, 2017 @10:02AM (#13967757)

Sounds good to me.

[ Parent | on HN ]

Re:Triple Flaw in Nest's Dropcam by Johnny555 on Monday March 27, 2017 @01:12AM (#13965336)

The third flaw is endemic to Wifi, and it's so easy to execute with off-the-shelf tools that the more esoteric attacks hardly make the camera security any worse.

Anyone that cares about security uses hard-wired cameras.

[ Parent | on HN ]