Re:Locked out of 'God Mode', runners are hacking their tread...
by Arnavion on Tuesday January 18, 2022 @05:43PM
(#29987179)
The one advantage of playing the cat-and-mouse game is that the longer it goes on, the more complexity ends up being in the firmware (TLS, HPKP, etc as you already listed), which increases the likelihood of a bug that can be exploited to take over it.
Re:Locked out of 'God Mode', runners are hacking their tread...
by VRay on Wednesday January 19, 2022 @12:32PM
(#29996830)
In that vein, it might be worth noting that this thing is just a treadmill. There's this whole fancy computer attached probably via just a handful of very simple wires to the actual treadmill part that anyone cares about. If they get too obnoxious about the computer, you can just open the treadmill, yank the computer out, and replace it with something from China that costs $20
Of course, that'll then get attacked via the legal system for violating DRM.. ugh
The remedy for that is to encrypt the communication
The remedy for that is to MITM the server connection
The remedy for that is HSTS...
It's a cat a mouse game, the better solution for society (imo) is to have specific rights enshrined by law to allow for a qualified 3rd parties to access a system's internals.