News for hackers. Stuff that matters.

A comment on Our fridge just emailed us to say we opened its door too many times. Parent comment

Re:Our fridge just emailed us to say we opened its door too ... by qwerty456127 on Friday September 10, 2021 @04:24AM (#28479011)
I can remember someone mentioned an old model (supposedly possible to find on eBay) which could be hacked to run a vendor-imitating server on itself and connect to it via localhost.
[ Parent | on HN ]
Re:Our fridge just emailed us to say we opened its door too ... by dugite-code on Friday September 10, 2021 @04:31AM (#28479060)
A few of the Xaiomi's and Viomi's are rootable. I have a Gen1 Xaiomi and it's brilliant. I got ssh access to the ubuntu install and installed https://github.com/Hypfer/Valetudo and run it 100% local via my home-assistant install.

dgiese is a proficient vacuum security researcher and has most of that stuff available here: https://github.com/dgiese/dustcloud

[ Parent | on HN ]
Re:Our fridge just emailed us to say we opened its door too ... by 908B64B197 on Friday September 10, 2021 @02:08PM (#28485142)
> Xaiomi's and Viomi's

Not sure I'd connect a device from these vendors to my home network.

[ Parent | on HN ]
Re:Our fridge just emailed us to say we opened its door too ... by dugite-code on Monday September 13, 2021 @08:43PM (#28518801)
One of the first steps when rooting is usually to block outgoing and incoming in iptables (it's a fairly standard ubuntu install after all) so you don't lose root at any point, so the risk is minimal. Not to mention I have a dedicated non internet routable IOT network specifically for this reason.
[ Parent | on HN ]