Wyze security incident update

Re:Wyze security incident update by pylua on Monday February 19, 2024 @09:53AM (#39430365)

Device id and user ids are non unique?

[ Parent | on HN ]

Re:Wyze security incident update by mistrial9 on Monday February 19, 2024 @10:01AM (#39430470)

hash collisions?

[ Parent | on HN ]

Re:Wyze security incident update by NathanKP on Monday February 19, 2024 @10:32AM (#39430844)

I'd bet it's this, plus something even stupider like hashing a connection timestamp millisecond as the "uniqueness" of the hash. I've seen a lot of terrible code implementations that assume that there will never be two clients connecting in the exact same millisecond

[ Parent | on HN ]

Re:Wyze security incident update by avg_dev on Monday February 19, 2024 @10:20AM (#39430690)

This sounds like a pretty decent guess to me. I bet you are right.

[ Parent | on HN ]