News for hackers. Stuff that matters.
Re:Reports from Nest Secure customers who are unable to arm/... by peterwwillis on Thursday May 17, 2018 @10:36AM (#17091592)
Why would they depend on the internet to allow you to control a device at your home? NFC? Bluetooth? Wifi? Ignoring the obvious security problems of these devices being internet-connected, it's just a crap design from a usability standpoint. (where "usability" includes "can use it when the internet goes out")
Re:Reports from Nest Secure customers who are unable to arm/... by hn_throwaway_99 on Thursday May 17, 2018 @10:50AM (#17091749)
My understanding from other posters, though, is that the devices did NOT require internet access to control them, e.g. you could walk over to the Nest thermostat to change the temp, or key in a Nest lock code to unlock it. So, for a few hours, seems like the devices just turned into "dumb" devices instead of "smart" ones. Doesn't seem as drastic a loss of functionality as is being presented here.
Re:Reports from Nest Secure customers who are unable to arm/... by kodablah on Thursday May 17, 2018 @11:07AM (#17091922)
The comment you are responding to though is asking why some of the non-physical-yet-local protocols aren't leveraged but instead you have to go all the way back out to the internet and back to do something local. Why don't these products use LAN or other local, non-cloud options? That you can physically control it doesn't answer the question.
Re:Reports from Nest Secure customers who are unable to arm/... by vlovich123 on Thursday May 17, 2018 @11:27AM (#17092120)
For starters you don't have to worry about AP isolation & inconsistent router configurations. It also drastically simplifies the user enrolment/validation process and makes the UX of that far more consistent. It also might mean it's a lot more difficult to take over a Nest remotely if it's pinned to only communicate with Nest servers. Finally, the C&C protocols can evolve in the current model more easily as it's all server-side; the mobile & web apps just need to communicate via simple REST APIs. This drastically simplifies the maintenance of these codebases & speeds up how quickly they can address any security vulnerabilities.

These choices Nest has made simplifies the SW stack, UX & provides for better security at the cost of mandating a physical fallback rather than a LAN fallback. You may see things differently but that doesn't mean these aren't valid engineering tradeoffs.

Re:Reports from Nest Secure customers who are unable to arm/... by gerbilly on Thursday May 17, 2018 @11:59AM (#17092473)
> These choices Nest has made simplifies the SW stack, UX & provides for better security at the cost of mandating a physical fallback rather than a LAN fallback. You may see things differently but that doesn't mean these aren't valid engineering tradeoffs.

Well it sounds like tradeoffs that make the engineer's life easier.

Maybe they should actually tackle the harder challenge of getting their supposedly smart devices to work in a heterogenous networking environment.

That would be a real innovation.

Re:Reports from Nest Secure customers who are unable to arm/... by vlovich123 on Thursday May 17, 2018 @01:34PM (#17093438)
Easier engineering life = cheaper maintenance = lower product cost = more $$ for consumer. Similarly, easier engineering life = less time spent on maintenance = more time spent on customer features.

I'm also unclear why you are claiming the only gains are in maintenance. Security is a real end-user benefit & having devices not allow arbitrary incoming network connections is a security choice. Similarly, arbitrating everything through the web results in a simpler, more reliable, enrolment process & makes it easy to add customer features like family control more easily, securely & reliably. These are all customer-facing advantages.

2 hours out of a year is still 3, almost 4, 9s of uptime. That's probably better than your home network/ISP.

I get it. You personally would prefer they traded off for supporting direct connection to your phone. However, that doesn't invalidate that there are legitimate engineering reasons someone might choose other tradeoffs.

Re:Reports from Nest Secure customers who are unable to arm/... by dcow on Thursday May 17, 2018 @02:46PM (#17094223)
I get your point, too, but will challenge the assumption that things need to be insecure in order to operate on an isolated LAN. It's a myth. TLS works just fine if you provision the peers with certificates. Not global TLS certs, just ones you generate for the LAN. There are other ways to do security if TLS is not what you're looking for. The problem is these options aren't easily accessible to developers so the path of least resistance is to use internet security.
Re:Reports from Nest Secure customers who are unable to arm/... by vlovich123 on Sunday May 20, 2018 @07:52PM (#17115363)
I think you just answered your own question. The generation & management of these TLS certificates presents a giant challenge you're papering over. There's probably technical solutions to make it pretty seamless but now in addition to the cloud you have a completely alternate control path you have to maintain, secure & keep updating. Additionally, some of the solutions to managing an isolated LAN with a decent UX might entail a cloud component anyway (to manage the TLS certificates).

I could totally understand why the Nest team wouldn't view it as a compelling product requirement. You need the cloud anyway because people regularly control the thermostat outside their home (e.g. to pre-warm/pre-cool when they're heading home). It's all the same infrastructure that's leveraged to run products beyond the thermostat (doorbell, security) that also have a compelling remote use-case. The isolated LAN approach could still require a cloud component for managing access. The C&C UX could become quite confusing trying to support both isolated LAN & cloud. If the cloud part fails you're no worse off than if you had a non-smart thermometer/doorbell with a good UX.

Now you could obviously have remote abilities without the cloud but the UX story becomes even trickier because you need to figure out how to rendezvous & punch through a wide variety of firewall configurations. These are all things technical users could solve given the appropriate settings exposed (eg. dynamic DNS) but it's totally unnecessary for the less technically minded users Nest is targeting (or even technical-minded users who don't want to care about managing every single smart device on their network).

Re:Reports from Nest Secure customers who are unable to arm/... by tjoff on Thursday May 17, 2018 @12:06PM (#17092536)
Wouldn't really be innovation, it would just be doing the bare minimum required.

The only reason these "smart" devices can exist is because the market hasn't matured and customers don't know any better.

Re:Reports from Nest Secure customers who are unable to arm/... by kodablah on Thursday May 17, 2018 @12:11PM (#17092597)
I may be in the minority, but I won't buy remote control devices that require access to the internet. I am not trying to control my devices outside of my house unless I take the intranet iface and expose it myself.

A bit off topic, but I am hoping one day the always-on in-home server takes off for the average user so that my ability to expose my in-home server to the public internet is no longer a minority skill.

Re:Reports from Nest Secure customers who are unable to arm/... by nordsieck on Thursday May 17, 2018 @11:28AM (#17092128)
> Why don't these products use LAN or other local, non-cloud options?

For the equivalent effort to implement, most customer's revealed preferences are for new/better features rather than robust local intelligence.

This kind of event just doesn't happen very often.

Re:Reports from Nest Secure customers who are unable to arm/... by kodablah on Thursday May 17, 2018 @12:07PM (#17092543)
> This kind of event just doesn't happen very often.

While it may not happen very often, I wonder how many customers (like me) they lose because the customers do not want their devices to even have internet access but still want local remote control (and are willing to sacrifice non-local remote control).

Re:Reports from Nest Secure customers who are unable to arm/... by kemitche on Thursday May 17, 2018 @12:14PM (#17092633)
The answer is going to be "very few." Perhaps enough that a competitor has room to gain some share, but the average user, even for a product like Nest? Nah.
Re:Reports from Nest Secure customers who are unable to arm/... by soylentcola on Thursday May 17, 2018 @12:09PM (#17092559)
I'd imagine it's so you can check on them or adjust them from outside your home network. If you're leaving town for a week and forgot to switch off the air conditioning, you don't need to run back home when you're halfway to the airport.

I guess ideally they would utilize a more localized protocol when you're nearby and then fall back to control->remote server->device when you're not.

Re:Reports from Nest Secure customers who are unable to arm/... by dgacmu on Thursday May 17, 2018 @11:42AM (#17092287)
It'd be interesting to do a study of how many device outages can be fundamentally attributed to the 32-bit IP space. :-)

(In case it's not clear, many of the reasons devices use cloud rendezvous have to do with NATs and firewalls and the difficulty of doing direct node-to-node communication in today's very fragmented Internet. Not all - some are security and complexity.)

Re:Reports from Nest Secure customers who are unable to arm/... by peterwwillis on Thursday May 17, 2018 @11:00AM (#17091849)
Sounds exactly like your TV's remote control no longer working.
Re:Reports from Nest Secure customers who are unable to arm/... by Clubber on Thursday May 17, 2018 @11:01AM (#17091862)
Essentially yes, except my TV can't be controlled without the remote. It's more like your car's unlock button doesn't work, but you still have the key.
Re:Reports from Nest Secure customers who are unable to arm/... by IBM on Thursday May 17, 2018 @10:46AM (#17091702)
A big advantage of HomeKit is that it works locally and mandates security in the ecosystem.
Re:Reports from Nest Secure customers who are unable to arm/... by steve_musk on Thursday May 17, 2018 @11:31AM (#17092162)
Yeah as I’ve researched smart home stuff I’ve become more and more impressed with HomeKit. The HomeKit devices talk to iOS devices over the LAN and then an Apple TV acts as the “bridge” that lets you control your house over the internet. It sucks you have to buy an Apple TV to do it but I’m more comfortable having my thermostats, light switches, etc. all connect to the internet through a single (and reliably updated) device vs. relying on individual manufactures to secure their devices.
Re:Reports from Nest Secure customers who are unable to arm/... by cabaalis on Thursday May 17, 2018 @10:39AM (#17091620)
Perhaps the functionality of from-anywhere control led them to make internet the only available connectivity. If you assume the service and connection will be always available, why put multiple receivers on the device? Seems the problem here was in the assumption.
Re:Reports from Nest Secure customers who are unable to arm/... by socrates666 on Thursday May 17, 2018 @10:43AM (#17091665)
Bad design. It should only depend on local net, and then raise an interface to outside world as needed.
Re:Reports from Nest Secure customers who are unable to arm/... by cptskippy on Thursday May 17, 2018 @01:25PM (#17093343)
Reduced complexity and higher reliability.

Instead of your apps having to detect if they're local or remote to the device and then implementing a different protocol based on locality, they instead just always call out to a cloud based location.

They don't have to devote resources to maintaining 2 APIs for every product and can instead focus on reliability and robustness of the one interface.

> it's just a crap design from a usability standpoint.

I would argue the opposite. By having to support both cloud and local communication, you're introducing complexity and the possibility that APIs could diverge in functionality and reliability.

Re:Reports from Nest Secure customers who are unable to arm/... by otakucode on Thursday May 17, 2018 @12:53PM (#17093033)
While it would not be technologically difficult to design most products to not require 'cloud' connectivity to provide full functionality, it would cut the companies out of data collection and they don't want that. How else will Google decide that saving the planet by manipulating everyones Nest to lie about the temperature its actually set at by a degree or two is too irresistable to pass up? One degree for an hour over 100 million people... just imagine the scale of CO2 emissions reduced, power consumption reduced, etc. Honestly surprised it hasn't happened yet.
Re:Reports from Nest Secure customers who are unable to arm/... by toomuchtodo on Thursday May 17, 2018 @10:39AM (#17091631)
Could they create a way to host a service at your home for direct connect from the app so connectivity doesn’t rely on a cloud service? Sure. Most consumers don’t care though. I certainly don’t care. This is the first major Nest outage I can remember. It would take continued intermittent outages for me to re-evaluate my Nest devices at my homes.

Either a cloud app is going to go out, or my home internet is going to go out. I don’t expect 100% uptime because I’m realistic, and expecting non-cloud infra devices with no time commitment is a pipe dream.

Re:Reports from Nest Secure customers who are unable to arm/... by amluto on Thursday May 17, 2018 @10:43AM (#17091667)
I had the impression that this capability was a hard requirement for HomeKit support. Go Apple.
Re:Reports from Nest Secure customers who are unable to arm/... by lstamour on Thursday May 17, 2018 @10:44AM (#17091674)
... or batteries run out. That's happened twice for me with when I'm only using a smart lock occasionally.
Re:Reports from Nest Secure customers who are unable to arm/... by mynameisvlad on Thursday May 17, 2018 @10:54AM (#17091786)
Not an issue with smart thermostats, their batteries are constantly charged through the wiring.

Plus, if your batteries run out, then you wouldn't be able to change the temperature anyway. You have far bigger problems than the device being online only.

Re:Reports from Nest Secure customers who are unable to arm/... by reaperducer on Thursday May 17, 2018 @11:39AM (#17092256)
>Could they create a way to host a service at your home for direct connect from the app so connectivity doesn’t rely on a cloud service?

I believe that's how Apple does it. The local host device is either an AppleTV, or an iPad.

Re:Reports from Nest Secure customers who are unable to arm/... by socrates666 on Thursday May 17, 2018 @10:43AM (#17091671)
How do you feel knowing that you are being watched?
Re:Reports from Nest Secure customers who are unable to arm/... by toomuchtodo on Thursday May 17, 2018 @10:44AM (#17091680)
Unphased. I only have thermostats and smoke detectors.
Re:Reports from Nest Secure customers who are unable to arm/... by reaperducer on Thursday May 17, 2018 @11:41AM (#17092282)
Great data for getting your insurance rates raised.

All it takes is for Snake Farm to pay to find out how many times your smoke detector goes off. Or even if it doesn't fully go off, how often it senses anything.

With your thermostat data, it's possible to build a profile of when you're home and away. Hmmm... he seems to work an overnight shift. Better jack up his premium!

Re:Reports from Nest Secure customers who are unable to arm/... by kevinh on Thursday May 17, 2018 @11:48AM (#17092346)
If companies do start charging different amounts based on smart device data, it will most likely be discounts from an increased premium (which you wouldn't get without smart devices) rather than increases in fees due to usage behavior.

So in your case, better buy that smart device.

Re:Reports from Nest Secure customers who are unable to arm/... by reaperducer on Thursday May 17, 2018 @01:56PM (#17093682)
>If companies do start charging different amounts based on smart device data

Companies already do: https://www.progressive.com/auto/discounts/snapshot/

In this case, Progressive gives you a discount in exchange for monitoring you.

But I've seen articles where other insurance companies (often in the UK for some reason) raise rates for things as seemingly innocuous as posting the wrong thing, or being "friends" with the wrong people on social media.

Re:Reports from Nest Secure customers who are unable to arm/... by toomuchtodo on Thursday May 17, 2018 @12:48PM (#17092999)
This is a public policy issue, not a technical issue.
Re:Reports from Nest Secure customers who are unable to arm/... by mar77i on Thursday May 17, 2018 @10:40AM (#17091642)
I guess you couldn't continuously support and update (terrorize?) people's smart stuff otherwise. It's not like open source, where you build it and are responsible when it breaks.
Re:Reports from Nest Secure customers who are unable to arm/... by zippitydoodah68 on Thursday May 17, 2018 @11:05AM (#17091911)
I think you can figure this out. Not about design, about determining demand/profit, data collection, and control.
Re:Reports from Nest Secure customers who are unable to arm/... by mtgx on Thursday May 17, 2018 @10:46AM (#17091707)
But then how is Google going to collect and monetize your data - after you've already purchased its product?
Re:Reports from Nest Secure customers who are unable to arm/... by abiox on Thursday May 17, 2018 @11:39AM (#17092258)
i suspect it's because nest is a bit of a (niche) data play.

i don't necessarily care that much about that, but i do want such a product to work perfectly fine whether there's a connection to their servers or not.

Re:Reports from Nest Secure customers who are unable to arm/... by SkyPuncher on Thursday May 17, 2018 @10:52AM (#17091758)
I think it's the "most reliable" way to get them to work. When you have a centralized server, both devices know exactly how to connect to the centralized server and communicate through it.

Local connectivity seems to present all sort of silly issues that make the user experience a bit inconsistent. Heck, look at Chromecast, it works great about 90-95% of the time. That 5-10% of the time it doesn't work, it becomes a complete pain.