Show HN: Coldframe, a honeypot that poses as a supermarket fridge controller

Re:Show HN: Coldframe, a honeypot that poses as a supermarke... by supriyo-biswas on Saturday November 07, 2026 @01:03PM (#50406579)

I would be very skeptical of anyone relying on Shodan data. At one point I was trying to write honeypots myself by replicating wifi cameras, but almost all the ones on the internet I found were honeypots of some sort; in retrospect it would have probably been better to get a vulnerable device myself and probe it.

If I were you, I would probably ensure that the fridges you used have residential or commercial (aka non-DC) IP addresses. Maybe Shodan uses this data for their "honeypot" label, my experience was some time ago so no idea though.

[ Parent | on HN ]

Re:Show HN: Coldframe, a honeypot that poses as a supermarke... by hedgerow-dev on Saturday November 07, 2026 @01:21PM (#50406723)

At this point the honeypot I'm running is not marked as honeypot. Guess that it's a good sign?

[ Parent | on HN ]

Re:Show HN: Coldframe, a honeypot that poses as a supermarke... by supriyo-biswas on Saturday November 07, 2026 @01:28PM (#50406770)

What I meant is that I'd find some way of ensuring that I'd want to ensure that the responses you're serving up are real. If you are happy with what you have, we're good.

[ Parent | on HN ]

[dead]

Re:Show HN: Coldframe, a honeypot that poses as a supermarke... by direwolf20 on Sunday November 08, 2026 @12:59AM (#50410799)

Did AI write this comment?

[ Parent | on HN ]

Re:Show HN: Coldframe, a honeypot that poses as a supermarke... by Shorel on Sunday November 08, 2026 @01:11AM (#50410852)

The tell is the biggest tell. xD

[ Parent | on HN ]

Re:Show HN: Coldframe, a honeypot that poses as a supermarke... by ThePowerOfFuet on Sunday November 08, 2026 @03:11AM (#50411338)

Danfoss was misspelled, so probably not.

[ Parent | on HN ]