What do you guys think of the idea of smart homes? I could make a basic setup using https://home-assistant.io to control my home temperature and lighting; the tools for doing this are everywhere nowadays and implementation doesn’t seem too horrific anymore.
But setting aside what I “can” do, is this something that I “should” do? How can a person implement this without connecting any devices to the internet?
Buddy of mine moved into a new apartment and they have a couple of “smart features”: Temp, blinds, lights. No cameras (except the front door) or other fancy stuff.
However the apartment can be reached from any browser with a hash. So if you know the hash, you can easily access his apartment controls. Not password, 2FA or anything necessary to identify him.
When he told me I was looking at him with wide eyes and he just laughed and said “Yeah, I know.”.
I mean, you’d have to guess it and that’s the hard part, but if you can, you can probably also guess the hash of all other apartments. Unless they add some random string into the hashable info, you can guess your own hash with your own apartment info (every apartment has a house ID and apartment ID etc.).
Would be a funny weekend project to see if we could get anywhere with it. He could turn down the heat from his neighbors.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@beehaw.org
A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.
Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.
Buddy of mine moved into a new apartment and they have a couple of “smart features”: Temp, blinds, lights. No cameras (except the front door) or other fancy stuff.
However the apartment can be reached from any browser with a hash. So if you know the hash, you can easily access his apartment controls. Not password, 2FA or anything necessary to identify him.
When he told me I was looking at him with wide eyes and he just laughed and said “Yeah, I know.”.
Soo…what’s the hash?
I mean, you’d have to guess it and that’s the hard part, but if you can, you can probably also guess the hash of all other apartments. Unless they add some random string into the hashable info, you can guess your own hash with your own apartment info (every apartment has a house ID and apartment ID etc.).
Would be a funny weekend project to see if we could get anywhere with it. He could turn down the heat from his neighbors.
If you are at least familiar with technology and search engines you can find pretty much any smart device on shodan.io