Repository navigation
Have one private/public ssh keys per sensor #69
Description
Activity
You can reverse engineer the lightbulb's firmware to find weaknesses in that lightbubl's mesh protocol.
(...) I want to be shot in the face right now, factoïd number 3, this is deeply problematic
Once you do that reverse engineering, you'll discover that each instance of this lightbulb had the same cryptographic key, the same AES key baked into the firmware.
That means that once you extract that key from the firmware once, from any lightbulb, you can use it to decrypt the wifi password then connect to the wifi using this stolen credentials (...)The end times are here, ok ?
Jesus is about to come back, or maybe the Buddha, or maybe Godzilla
But somebody's going back and they're not gonna be happy
They currently all use the same. Sensors should generate their own and be able to share their public key to pheromon on demand.