Hacked from a lightbulb

Re:Hacked from a lightbulb by mopsi on Saturday February 08, 2020 @01:59PM (#22277620)

Consumer routers do have this feature, but usually it's software-limited to single additional VLAN and called "guest network". It would be trivial to add an option for dedicated "IOT network".

Even the cheapest $20 routers are actually quite capable in terms of hardware, supporting at least 16 VLANs.

[ Parent | on HN ]

Re:Hacked from a lightbulb by daurnimator on Saturday February 08, 2020 @10:29PM (#22280219)

Except that many IOT devices require you to be in the broadcast domain for control and discovery....

e.g. with LIFX wifi light bulbs, you can control them with low latency (and no internet connection) via ip packets; or high latency via LIFX's cloud servers if you're not in the same subnet.

[ Parent | on HN ]

Re:Hacked from a lightbulb by iso1210 on Sunday February 09, 2020 @06:17AM (#22281562)

Are they using broadcast packets, or is it multicast and enabling multicast routing on your home network fixes the problem (you might need a mangle rule to bump up the TTL)

[ Parent | on HN ]

Re:Hacked from a lightbulb by daurnimator on Sunday February 09, 2020 @08:36AM (#22282022)

UDP broadcast: https://lan.developer.lifx.com/v2.0/docs/workflow-diagrams#d...

[ Parent | on HN ]

Re:Hacked from a lightbulb by iso1210 on Sunday February 09, 2020 @09:54AM (#22282388)

Nasty. Maybe able to do it with a dst-nat?

[ Parent | on HN ]

Re:Hacked from a lightbulb by snuxoll on Sunday February 09, 2020 @01:51AM (#22280785)

Meanwhile my WiFi-enabled HomeKit devices happily run on a segmented network.

[ Parent | on HN ]

Re:Hacked from a lightbulb by mirimir on Saturday February 08, 2020 @02:07PM (#22277671)

Oh. Well, then, just put all the IoT stuff on the guest network.

Maybe hard on your guests, though :(

[ Parent | on HN ]