Re:Helium.co: Connect devices to the web without Wi-Fi, Blue...
by dotBen on Thursday July 03, 2014 @01:29AM
(#7981605)
I'm curious what kind of eavesdropping is feasible on this band. It's not clear if there's encryption built in, especially if low power, and the long distances make for some attractive triangulation opportunities too.
[ Parent
| on HN ]
Re:Helium.co: Connect devices to the web without Wi-Fi, Blue...
by densone on Thursday July 03, 2014 @01:33AM
(#7981622)
Hey dotBen. Messages are aes-256 encrypted. Every single device on helium has its own unique secret. We will be writing about this on the blog very soon.
You can further encrypt your own payloads to keep them extra secret from us too.
Re:Helium.co: Connect devices to the web without Wi-Fi, Blue...
by stevenrace on Thursday July 03, 2014 @02:49AM
(#7981813)
Is it prone to existing Zigbee attacks ('packet of doom', key extraction, etc)?
Re:Helium.co: Connect devices to the web without Wi-Fi, Blue...
by sweis on Thursday July 03, 2014 @01:48AM
(#7981663)
Are the unique secrets defined by the user or at manufacture time?
If by the manufacturer, then it is potentially a security and privacy concern.
Re:Helium.co: Connect devices to the web without Wi-Fi, Blue...
by pharkmillups on Thursday July 03, 2014 @02:12AM
(#7981722)
Hey Sweis -
There's a whole process to how the secret for each device is created. That secret is used to ensure helium connectivity is safe. You can then securely implant your own secret into a chip we use and that secret can be used to encrypt your payload. Helium never has to know what you are sending. We just need to know where it's going so we can get it there for you.
We'll be posting more docs on this in the coming weeks and months. Feel free to shoot me an email if you want to chat more before they are available.
Re:Helium.co: Connect devices to the web without Wi-Fi, Blue...
by X-Cubed on Thursday July 03, 2014 @01:31AM
(#7981610)
https://www.helium.co/#/tech
End-to-end 256-bit SSL encryption