dslreports logo
uniqs
6

sivran
Vive Vivaldi
Premium Member
join:2003-09-15
Irving, TX

sivran to aurgathor

Premium Member

to aurgathor

Re: Don't Toss That Bulb, It Knows Your Password

said by aurgathor:

Hmmm, I was actually looking at prices for a Philips Hue starter kit....  

Isn't Hue a bridge system like Zwave and Zigbee? In other words, only the Hue Bridge knows your wifi password--the Hue devices only know about Hue. This is probably a sufficient extra layer of protection.

It is definitely a sufficient motivation to use a separate wlan for idIOT devices, or at a minimum, firewall rules on sensitive hosts on the network to block all but some whitelisted hosts.

DarkLogix
Texan and Proud
Premium Member
join:2008-10-23
Baytown, TX

DarkLogix

Premium Member

said by sivran:

Isn't Hue a bridge system like Zwave and Zigbee?

I think so.

Also don't some of the Hue bridges have a wired port?
Though I wonder would the bridge work if on a UPS? if not then it could be an issue as a power surge could use the bridge to bridge past the UPS.

camper
just visiting this planet
Premium Member
join:2010-03-21
Bethel, CT

camper to sivran

Premium Member

to sivran
said by sivran:

Isn't Hue a bridge system like Zwave and Zigbee?

 

»developers.meethue.com/p ··· join-us/


...
Philips Hue can become a natural ingredient of any gaming, movie or audio experience. We believe that lighting can provide a new level of spacial immersion. Join us.

‘Philips Hue Entertainment’ is a major software update for the Philips Hue v2 bridge, Philips color capable lights and the Philips Hue app which is going to strengthen the lighting system’s integration into any home entertainment experience.
Our goal with Hue Entertainment is to fully immerse Hue users in their music, TV, movies and video games with high-quality, synchronized lighting effects.

As we’re sure you know, wireless communication with Philips Hue is based on the ‘Zigbee’ protocol. Zigbee uses a mesh network where every light repeats a message, providing simple, secure and reliable coverage in any home. This technology is fantastic for scene setting and automated-command use cases but runs into limitations when we try to push fast-changing special effects in live entertainment content....




sivran
Vive Vivaldi
Premium Member
join:2003-09-15
Irving, TX

sivran

Premium Member

Ah so it IS Zigbee. For some reason I thought it was another proprietary one. Either way, this means Hue bulbs (and other Zigbee devices) do not know your wireless password. And a quick check shows the bridge is indeed wired only, so it doesn't know your wireless password either.

Not too worried about this vector of attack though. If someone wants on my network they're gonna have more luck cracking the WPA2 password than waiting for me to throw away a "smart" device, digging it out of the trash, and then pulling the password from it.
tdc012
join:2017-03-01
Saltville, VA

tdc012 to DarkLogix

Member

to DarkLogix
I have my hue bridge plugged into the same ups as my rack. I figure it doesn’t use enough power to really affect runtime.

DarkLogix
Texan and Proud
Premium Member
join:2008-10-23
Baytown, TX

DarkLogix

Premium Member

said by tdc012:

I have my hue bridge plugged into the same ups as my rack. I figure it doesn’t use enough power to really affect runtime.

Well I wasn't thinking about run time but if it effected zigbee at all.
tdc012
join:2017-03-01
Saltville, VA

tdc012

Member

Why would a ups affect zigged? Does a ups cause interference or something with a simulated sine wave? I don’t know a lot about electrical stuff. I haven’t seen any issues with mine plugged into a cyber power 1500VA ups.

DarkLogix
Texan and Proud
Premium Member
join:2008-10-23
Baytown, TX

DarkLogix

Premium Member

said by tdc012:

Why would a ups affect zigged?

Well doesn't Zigbee use the power wiring to communicate? And I know those Powerline ethernet devices don't like even just a surge protector.

sivran
Vive Vivaldi
Premium Member
join:2003-09-15
Irving, TX

sivran

Premium Member

No it's a 2.4GHz radio that could potentially interfere/be interfered with by wifi. (Z-Wave uses something in the 900MHz range)

DarkLogix
Texan and Proud
Premium Member
join:2008-10-23
Baytown, TX

DarkLogix

Premium Member

said by sivran:

No it's a 2.4GHz radio that could potentially interfere/be interfered with by wifi. (Z-Wave uses something in the 900MHz range)

Ah ok, cool.