News for hackers. Stuff that matters.
Re:The three million toothbrush botnet story isn't true by nevi-me on Tuesday February 06, 2024 @06:24PM (#39282311)
It's hard to believe that toothbrushes run Java. There's just not enough space in them for that. Plus 3 million is a huge number.
Re:The three million toothbrush botnet story isn't true by miki123211 on Tuesday February 06, 2024 @07:15PM (#39282827)
Your credit / debit card (and probably your SIM card) run Java[1]. So did most cellphones from the early 2000s[2]. I can believe that some IoT devices run chips more powerful than your average phone from 20 years ago.

[1] https://en.wikipedia.org/wiki/Java_Card [2] https://en.wikipedia.org/wiki/Java_Platform,_Micro_Edition

Re:The three million toothbrush botnet story isn't true by jcrawfordor on Tuesday February 06, 2024 @07:23PM (#39282890)
JavaCard has actually lost a lot of its popularity for ICC applications like credit cards and SIMs. It's hard to get good numbers from the industry, which tends towards secretive, but these days SELP and MULTOS seem more popular.

Of course the availability of multiple OS for these devices reinforces the idea that you can run a lot of things on some very low power devices these days.

At the same time, it's important to understand that JavaCard is a very constrained version of Java. Most JavaCard platforms have no support for IP networking, which would make it an unlikely source of DDoS (besides the fact that it requires relatively specialized developer tooling).

Re:The three million toothbrush botnet story isn't true by miki123211 on Thursday February 08, 2024 @04:56PM (#39308303)
> Most JavaCard platforms have no support for IP networking, which would make it an unlikely source of DDoS

I'm not claiming that you could use a smart card for DDoS (the idea seems absurd, but somebody is probably going to prove me wrong one of these days), merely that if some version of Java runs on a smartcard, I don't find it that unimaginable for a toothbrush to have a good enough chip to run Java, perhaps with enough resources for a TCP / IP stack. Something equivalent in performance to an old, WAP-capable phone that also ran Java ME, perhaps.

Re:The three million toothbrush botnet story isn't true by throw-away_42 on Tuesday February 06, 2024 @06:37PM (#39282465)
Java in a 5x18mm device over 20 years ago: https://csrc.nist.gov/csrc/media/projects/cryptographic-modu...
Re:The three million toothbrush botnet story isn't true by jeffbee on Tuesday February 06, 2024 @06:40PM (#39282498)
Not to mention java card
Re:The three million toothbrush botnet story isn't true by nicce on Tuesday February 06, 2024 @06:49PM (#39282586)
Do you know the origin of Java? Fun fact, it was originally made for embedded, small electrical devices.

While not exactly, small, the first Java product was remote controller with touchscreen...

https://archive.org/details/Star7Demo

Re:The three million toothbrush botnet story isn't true by supportengineer on Tuesday February 06, 2024 @06:41PM (#39282499)
Anyone remember the Java ring given out at JavaOne?

https://www.ebay.com/itm/300495374337

Re:The three million toothbrush botnet story isn't true by c0balt on Tuesday February 06, 2024 @07:56PM (#39283122)
You can, today, buy ARM chips with support for executing simple Java Bytecode directly. The Jazelle[0] earchitecture is a primary intended to accelerate JVMs[1] and is still found on some devices. There also were some other initiatives around embedded devices on the past to get Java running on smart cards and more.

[0]: https://en.m.wikipedia.org/wiki/Jazelle in [1]: https://developer.arm.com/documentation/ddi0406/c/Applicatio...

Re:The three million toothbrush botnet story isn't true by aidenn0 on Tuesday February 06, 2024 @06:27PM (#39282357)
Is Java ME the smallest Java platform with ~8MB of RAM as a requirement?

[edit]

No, Java ME CLDC can run on devices with as little as 160kB of ROM and 8kb of RAM.

Re:The three million toothbrush botnet story isn't true by vizzier on Tuesday February 06, 2024 @06:43PM (#39282524)
You get into "does this still really count as java" but I believe this runs in most sim cards: https://en.wikipedia.org/wiki/Java_Card
Re:The three million toothbrush botnet story isn't true by clwg on Tuesday February 06, 2024 @06:54PM (#39282631)
At 3 million it would be the 8th largest botnet ever discovered. https://en.wikipedia.org/wiki/Botnet#Historical_list_of_botn...
Re:The three million toothbrush botnet story isn't true by Retr0id on Tuesday February 06, 2024 @07:04PM (#39282730)
3 billion devices run java.
Re:The three million toothbrush botnet story isn't true by anigbrowl on Tuesday February 06, 2024 @06:53PM (#39282620)
You can run Java on an ESP32, though why you would want to is another question.
Re:The three million toothbrush botnet story isn't true by adolph on Tuesday February 06, 2024 @08:50PM (#39283505)
Connect it to a relay to start your brew in the morning?
Re:The three million toothbrush botnet story isn't true by askvictor on Tuesday February 06, 2024 @07:04PM (#39282725)
Most SIM cards run Java