News for hackers. Stuff that matters.

A comment on Due to a problem with AWS, many "smart" vacuums or doorbells will stop working. Parent comment

Re:Due to a problem with AWS, many "smart" vacuums or doorbe... by nickserv on Friday November 27, 2020 @02:51AM (#25226405)
If it's on WiFi, any old packet sniffer on the network should do the job. If it's on cellular, you'll need to have access to police equipment.
[ Parent | on HN ]
Re:Due to a problem with AWS, many "smart" vacuums or doorbe... by ThermalCube on Friday November 27, 2020 @03:32AM (#25226605)
Cellular data? just connect your phone to your own VPN (like a RaspPi) and sniff there
[ Parent | on HN ]
Re:Due to a problem with AWS, many "smart" vacuums or doorbe... by tpetry on Friday November 27, 2020 @04:31AM (#25226955)
A packet sniffer on the network will not help with tls encrypted endpoints.

The charles proxy with custom ssl certificates may help if the certificate is not pinned in the app.

[ Parent | on HN ]
Re:Due to a problem with AWS, many "smart" vacuums or doorbe... by TeMPOraL on Friday November 27, 2020 @05:46AM (#25227481)
I'm going to bet a beer it's not encrypted at all. Too much hassle, so plenty of hardware vendors don't bother.
[ Parent | on HN ]
Re:Due to a problem with AWS, many "smart" vacuums or doorbe... by tpetry on Saturday November 28, 2020 @09:38AM (#25237750)
With everyone putting their services behind cliudflare or aws loadbalancer you very seldom see a http endpoint nowadays.
[ Parent | on HN ]