News for hackers. Stuff that matters.
Re:WD My Book users wake up to find their data deleted by 8fingerlouie on Friday June 25, 2021 @08:16AM (#27629784)
I never jumped on the “everything IoT” bandwagon, but recently I’ve relented a bit.

I own/use exactly 4 “IoT technologies”.

I have smart radiator thermostats that turn on/off the heat based on family presence, as well as “predict” the heating needs based on weather forecast, sunshine hours, etc.

I have a heat pump in my vacation house that is remote controlled by the internet. Not strictly needed, but very convenient in the winter.

To keep an eye on my vacation house I also have a camera that uses HomeKit Secure Video. Requires no infrastructure on my end except network.

And finally, like a lot of people I have Hue.

I control it all through HomeKit. I also keep everything on a couple of IoT VLANs, one for “trusted” devices (AirPlay, media, PlayStation, etc), and one for “everything else” with client isolation, filtered dns, IDS/IPS. No upnp/nat-pmp, no tunneling (if detectable), and no other dns servers but mine (until dns over https becomes a thing with IoT)

In the future however it might become more or less impossible to avoid. Our neighbors recently purchased a new oven, which of course comes with internet connectivity. Their new washing machine also has internet connectivity.

In the very near future everything will be connected under the pretense of providing useful feature, when in reality it’s all about pushing adds and gathering telemetry data.

Re:WD My Book users wake up to find their data deleted by wycy on Friday June 25, 2021 @09:45AM (#27630688)
How could an oven or washing machine possibly be useful remotely?! I'm a fan of connectivity, but that just seems absurd for those appliances.
Re:WD My Book users wake up to find their data deleted by bcrosby95 on Friday June 25, 2021 @10:09AM (#27630949)
Being able to remotely preheat my oven could be useful. But not enough to justify the risk of someone else remotely preheating my oven.
Re:WD My Book users wake up to find their data deleted by nitrogen on Friday June 25, 2021 @10:56AM (#27631569)
It could also be useful for anyone who worries they left the oven on.
Re:WD My Book users wake up to find their data deleted by labawi on Saturday June 26, 2021 @09:09AM (#27641519)
"I don't worry I've left the oven on anymore. Now I worry some else turned it on."
Re:WD My Book users wake up to find their data deleted by brobdingnagians on Saturday June 26, 2021 @11:02AM (#27642448)
And my concern would be that, like the diesel motor example, someone would find a failure state that starts a conflagration. Leaving it on accidentally at 200C probably won't hurt anything, but malicious hacks might be catastrophic.
Re:WD My Book users wake up to find their data deleted by edgeform on Friday June 25, 2021 @03:37PM (#27635296)
> How could an oven

Starting pre-heat before you get home. Monitoring temperature away from home. Leaving a dish in the oven and starting it at a specific time, say an hour or two before you leave the office and head home for the day. Checking if you left the oven on after you left home.

> or washing machine

Notifications for the end of the cycle. Status of detergent levels if equipped ("Do I need fabric softener?" whilst at the store). Starting a load (similarly to the oven above) while you are on your way home so you don't end up with wet clothes sitting all day, so they're ready for the dryer when you walk through the door.

--

I get your popular cynicism, but c'mon now. None of the stuff I'm outlining there was researched, it was all off the cuff and I live in an apartment with "dumb" appliances from 1996.

Re:WD My Book users wake up to find their data deleted by elkos on Friday June 25, 2021 @09:54AM (#27630799)
Can connect with Google Home or Alexa or Siri and do phonetic commands like start program or stuff like that I guess.

I'm a new dad and when we both are busy with work, chores and the baby I find myself wishing I had IoT devices to automate a couple of stuff home.

Re:WD My Book users wake up to find their data deleted by Eric_WVGG on Friday June 25, 2021 @02:08PM (#27634323)
My new oven has bluetooth and wifi connectivity. I obviously thought this sounded completely insane, but I went ahead and googled to see what people were using it for. I was actually surprised and impressed.

First, there's a way to do sous vide cooking without one of those big circulators like the one I use. They sell a device that is a little bluetooth thermometer; you can put it in a pot of water, and the induction range can keep the water at a precise temperature. No circulation, but more than good enough imo.

Then you can use the wifi to operate it remotely. So as a case scenario, one could fill a pot with ice and water and a sous vide bagged steak, then turn it on remotely, say an hour or so before getting home. Or one could conceivably leave an uncooked cake in the oven?

I will probably never bother to enable any of this, but yeah, there are uses. I don't want it, but I get it.

Re:WD My Book users wake up to find their data deleted by lhopki01 on Saturday June 26, 2021 @10:04AM (#27641948)
Most of these things can just be done by using the timer that comes with every oven. I've often set the oven to come up at around 15.00 so I can cook a stew for a few hours before getting home.
Re:WD My Book users wake up to find their data deleted by 8fingerlouie on Friday June 25, 2021 @02:32PM (#27634615)
I guess people who cook more than I do could find it useful.

But then again, if you’d asked me 4-5 years ago if I could see the usefulness of smart radiator thermostats, I’d probably have said no. The ability to remotely turn on/off heating is not that big a deal (to me).

It’s only when coupled with AI to optimize savings it becomes a great thing. Since installing the smart thermostats, I save on average 30% on my heating bill, and save the environment from 30% of my CO2 emissions from heating.

The AI part learns about how much the house heats up from a given amount of sunshine, coupled with outside temperature and heat loss, and controls the thermostats accordingly. If the indoor temperature is 1C below the target at 6am, but it’s expected to be sunshine, it simply won’t turn on the heat.

Re:WD My Book users wake up to find their data deleted by fps on Friday June 25, 2021 @11:01AM (#27631633)
remote pre-heating of the oven, remote alerts when the laundry is done. Non-connected versions of these appliances just make a really loud alarm sound when they need someone to pay attention to them, but a small notification on a phone would be more effective and less annoying.
Re:WD My Book users wake up to find their data deleted by jcynix on Friday June 25, 2021 @11:17AM (#27631855)
Remote preheating? I prefer a little more work-life balance, i.e. cook when I'm at home. And use the (rather short) time for preheating to look at the paper mail or mix a drink. Or stroll through the garden for some minutes.

Other appliances, e.g. our washing machine, tell me already how long they'll take. So I can set an alarm to not forget to care for them later. And if my fridge would alarm me because its door is not properly closed, I'd rather prefer a loud alarm over a small notification which I might overlook because a mobile device is someehere else.

Re:WD My Book users wake up to find their data deleted by collinmanderson on Monday June 28, 2021 @10:26PM (#27671006)
What do you use for IDS/IPS? I'm interested in doing something similar.
Re:WD My Book users wake up to find their data deleted by 8fingerlouie on Tuesday June 29, 2021 @07:58AM (#27674611)
I used to run on PfSense with Suricata, but my SG-3100 would frequently get rebooted by the watchdog because the load was too high.

These days i just use a Ubiquiti Dream Machine Pro. The base version works just fine as well, the pro just fit better on the shelf, and i didn't need an additional AP.