Re:NoLongerEvil-Thermostat – Nest Generation 1 and 2 Firmware
by torginus on Tuesday November 04, 2025 @04:40PM
(#45816200)
Sounds fishy, if the device allows this sort of fakery, that means the traffic is vulnerable to some sort of MITM attack by DNS poisoning/packet rerouting, which is somewhat disconcerting.
[ Parent
| on HN ]
Re:NoLongerEvil-Thermostat – Nest Generation 1 and 2 Firmware
by gruez on Tuesday November 04, 2025 @06:21PM
(#45817049)
>that means the traffic is vulnerable to some sort of MITM attack by DNS poisoning/packet rerouting
Because it uses https? OP gets around this by manually injecting his certificate, but if you have physical access to a device it's generally considered to be game over in most threat models.
Re:NoLongerEvil-Thermostat – Nest Generation 1 and 2 Firmware
by sedatk on Tuesday November 04, 2025 @06:11PM
(#45816972)
> if the device allows this sort of fakery, that means the traffic is vulnerable to some sort of MITM attack
No. This is a thermostat at your home. It forwards its DNS requests to your router. Feel free to establish whatever security protocols you need there. Or, even better, host your own server.