you are viewing a single comment's thread
view the rest of the comments
[–] 57 points 2 years ago (3 children)

What times your lights are on or off can expose more than you might think over time. It reveals when you're gone for work, your sleep schedule, how many days a year you spend at home vs traveling/elsewhere, when you stay up late, etc.

But it gets worse. If you give Hue your email or install the app then now you can be uniquely id'd across other products. Hue will sell that data to some advertising agency, who also buys data from Google, Facebook, etc. Now your usage data from other systems can be combined with the Hue data and used to more even more accurately track your day and behaviors.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 2 points 2 years ago*

    I'm not sure how do Hue lights work, but if they have any Wi-Fi component they're essentially a device in your network. If compromised (by a hacker or by Philips themselves) they're no different than a device next to yours on public Wi-Fi. Someone will definitely have a desktop PC with vPro with default credentials, or once in a while someone will log into something using HTTP without the S and leak plaintext credentials.

    People more well versed in networking often put their IoT devices in a separate network/VLAN so that they are all lumped together and away from personal PCs.

    Hell, I even block my ISP-issued modem/router/AP from ever getting an IP address on my network, and that way I can't even receive tech support from them lmao

  • source
  • parent