It Looks Like a School Bathroom Smoke Detector. A Teen Hacker Showed It Could Be an Audio Bug

Comments

• Maeve@kbin.earth ⁨1⁩ ⁨day⁩ ago

  https://archive.is/vLAaF

  “The unfortunate reality is there's a microphone connected to a computer that's connected to the network,” says Nyx. “And there's no software patching that will make that not possible to use as a listening device.”

  source
• LedgeDrop@lemmy.zip ⁨1⁩ ⁨day⁩ ago

  An interesting article and tbh, I’d actually support the device (… and I’m usually very privacy focused).

  According to the article the purpose of the microphone is to listen for certain keywords (ie: “help”, “call 911”, gunshots, etc) and to detect when people are vaping, etc.

  I mean, I would never install one in my home, due to privacy and security concerns. But if you’re in a public place, like a school such features make sense.

  If you’re being bullied or need help, having a facility member “hanging out” in the schools public bathroom would be weird, creepy, and more of an invasion of privacy than a mic in a smoke detector.

  That said, students and facility should be aware of what this device is doing and why. However, this article does a very good job of summarizing that.

  Yes, the devices security is rubbish, but was patched. It’s not the first IoT device to do that and it won’t be the last (unfortunately).

  Thanks for sharing the article OP.

  source

  • princessnorah@lemmy.blahaj.zone ⁨1⁩ ⁨day⁩ ago

    I feel like surveilling a bathroom used by minors goes beyond the pale though. If the technology exists, it will be abused.

    source

    • LedgeDrop@lemmy.zip ⁨23⁩ ⁨hours⁩ ago

      How do you think this technology would be abused?

      If the device included full audio and video surveillance - I’d totally agree. However, the device does not include video (and it would be a real hard sell to include that).

      If all parties are aware that monitoring will occur (maybe include a sign in the door), I’d argue that minors are aware of what this means.

      Perhaps, it would mean that students “finish up” faster, rather than loitering and vaping (or bullying, etc)… and if that’s the case, I guess the device has fulfilled it’s purpose.

      The article did mention how a hacked device could be used to “play sounds” or trigger false calls for “help”, or gunshots. But I’d argue this would be the modern day equivalent of falsely pulling the fire alarm.

      source

      • -> View More Comments
  • kayzeekayzee@lemmy.blahaj.zone ⁨21⁩ ⁨hours⁩ ago

    In theory it sounds reasonable, but recording people in the bathroom at all is pretty creepy.

    Not to mention once the kids learn about this, they’ll start shouting the keywords every time they’re in there.

    source
  • tyler@programming.dev ⁨23⁩ ⁨hours⁩ ago

    The security wasn’t patched. Any firmware update can be modified since the keys are provided with the update. So while the patch may have been applied, it’s not permanent.

    source

    • princessnorah@lemmy.blahaj.zone ⁨13⁩ ⁨hours⁩ ago

      I feel like the article could have done a slightly better job of pointing this out to the layperson. But yeah, it is trivially easy to get the key off the manufacturer’s own website. Easy enough for a high school teen to do it in my opinion.

      source
  • Lichtblitz@discuss.tchncs.de ⁨21⁩ ⁨hours⁩ ago

    Just install a panic button. The microphone is not reasonable since there are way less intrusive options available.

    source