Operation Smart Kettle – Börzels Blog

(blog.boerzel.de)

32 points | by marbartolome 2 days ago

9 comments

  • sagebird 33 minutes ago
    IF the EU isn't enforcing the 418 status code reply, honestly - what are your taxes going to?
  • ninalanyon 25 minutes ago
    So you can't use the app to control the kettle if your internet connection is down. Why doesn't it just run a simple server?
  • niemandhier 4 hours ago
    If you ever ask yourself what German hackers do with their life, while our peer in the US build startups:

    That’s what we do.

    • cyberpunk 2 hours ago
      It looks like all he managed to do was setup a wifi access point on a laptop and connect a kettle to it...

      That's 'hacking' these days is it?

      • niemandhier 2 hours ago
        He was having fun with a device that exposes needless endpoints, than he sat down and wrote about it, without ai in his own words.

        As far as I can judge, there is nothing in his writing, that indicates it is driven by the desire to get “an edge in competition” or “visibility” for his clients.

        When we bemoan the loss of the old internet, we feel the loss of people like him.

        Is what he does hacking? It’s what we used to call ‘hacking’, maybe we should come up with an another word now.

        I’ll retreat to my basement now and will sing the “free software song” in front of an image of St. IGNUtius.

  • Asraelite 4 hours ago
    I don't get it. A kettle is not a teapot.
    • _ZeD_ 26 minutes ago
      that's the ERROR code 418 for you :D
  • speedping 4 hours ago
    Probably a beken chip, should be easy enough to flash OpenBeken using the pins if they're exposed You can usually take over tuya devices if you sign up for a developer account and go some sort of verification process, it's pretty easy, sometimes it's possible to get a token for local control (tuya-local)
  • utopiah 2 hours ago
    Honestly this, the countless "I hacked my [insert here the most random appliance]" every day, e.g. before that on HN https://medium.com/@ivangomezarnedo/how-i-added-a-non-wi-fi-... and the polite arguments in https://news.ycombinator.com/item?id=49680275 shows me that :

    we do need an actual INTERFACE for appliances.

    Intellectually speaking it's really cool to "hack" your device, I do it too, but ... we shouldn't have to.

    We should be able to interface with hardware on our terms, offline, no proprietary app needed. It could work with the official app, with or without the server of the manufacturer, but it should not have to be the case.

    • bariumbitmap 0 minutes ago
      This is sometimes called "the right to interoperate", similar to the right to repair movement. Unfortunately it has been less successful than right to repair so far.

      https://www.eff.org/deeplinks/2020/07/legislative-path-inter...

    • XorNot 1 hour ago
      Honestly if Tuya just added official support so you could OTA flash their stuff, then between that and ESPHome this would already be done.

      If you have physical access (not easy always) it's relatively straight forward to upgrade a Tuya device to be truly local, but they've aggressively tried to shutdown things like Cloudcutter.

  • BlackRabbit1 4 hours ago
    Ah good old Tuya.

    Played around with them a while go.

    Found out you could do code execution while staying in the bootloader mode.. lol.

    But wasn't able to extract the keys I wanted.

  • nom 22 hours ago
    high chance you can just flash a suitable base firmware directly through pins on the board
  • kova12 1 hour ago
    I have a govee kettle which has a limited Bluetooth support, which is mostly used to configure WiFi, but can also turn kettle on and off and reports temperature. Not sure if this is interesting to anybody, but if yes I can wrap it up in GitHub project