←back to thread

353 points tahnok | 3 comments | | HN request time: 0s | source
Show context
fulafel ◴[] No.41836800[source]
So you just scan for devices and then read? There's no authorization involved, these just publish the readings wirelessly for all interested?
replies(2): >>41837113 #>>41837431 #
michaelt ◴[] No.41837431[source]
The basically-no-authorisation arrangement is somewhat common for modern bluetooth devices.

It's problematic for things like keyboards used for entering passwords - but if my next door neighbour wants to snoop on my living room thermometer or someone wants to snoop on my heart rate strap as I jog past their house? It doesn't seem to be much of a problem, in practice.

In the bad old days of bluetooth, loads of devices without screens would just hard code the pairing code to 000000 anyway. So it wasn't adding much security anyway. Unlike internet-connected devices, it's not exposed to a billion griefers from around the globe at any given moment.

replies(2): >>41837958 #>>41840010 #
1. swiftcoder ◴[] No.41840010[source]
... doesn't the app set an encryption key after they pair?

The most similar device I've worked on is the various Oculus devices. Which will also accept bluetooth connections from absolutely everyone, but the first time you connect you store an encryption key that is used to secure all subsequent comms.

replies(1): >>41840449 #
2. wongarsu ◴[] No.41840449[source]
If it did that then losing your phone, deleting the app's storage or moving to a different phone without transferring the app's storage would brick the smart ring.

Oculus decides are pretty big, I assume they have buttons that allow you to recover from that. This ring doesn't.

replies(1): >>41840836 #
3. swiftcoder ◴[] No.41840836[source]
I mean, they have at least one button to trigger a factory reset, yeah.

Even most input-less smart devices have a way to do that though - like those ridiculous smartlight bulbs where you have to flick the light switch on and off in morse code to trigger the factory reset