Top
Best
New

Posted by jrdres 2 days ago

Anyone on the Internet Can Ring Your Doorbell(www.abgeo.dev)
93 points | 56 comments
NetMageSCW 3 hours ago|
That would be impressive as my doorbell is hardwired from a button to a transformer and bell in a closet.
nottorp 57 minutes ago||
Mine is not only hardwired, but I mounted it kinda wrong and you need to press the dead center for it to ring :)
noufalibrahim 2 hours ago|||
It's the only way doorbells (and almost all other appliances) should be.
interludead 47 minutes ago|||
Your doorbell has an excellent threat model
fortran77 1 hour ago|||
I could train a crow to fly over and peck it.
ta8903 1 hour ago|||
Or just order some pizza to his address.
DonHopkins 1 hour ago|||
TaskCrow.com
plufz 58 minutes ago||
Don’t use those expensive escrow services, much cheaper to keep your own crows!
ErroneousBosh 59 minutes ago|||
Mine too. Not only that, the breaker for the transformer is switched off because the postman used to come right as my then-2-year-old was going for his nap. He's nearly 6 now and has not had an afternoon nap for a long time, and at some point I'll flip the breaker back on when I'm getting my jacket out of the hall cupboard.

But I didn't do that yesterday, I don't think I'll do it today, and it's not looking good for tomorrow either.

simondotau 2 hours ago|||
Airtasker. Boom.
compounding_it 2 hours ago|||
Electromagnetic triggers. Find the right frequency and resonate it.
ildon 1 hour ago||
This is a security concern as well. I'd argue even worse than the internet connected ones. Anyone at your front door (or where the button is) can easily know if you're at home, and take advantage if you're not. With the internet connected ones, you can always pretend.
mrweasel 14 minutes ago|||
From my experience with package delivery I can tell you this is not how it works. Press the button, door doesn't open that instance, ergo no one is home.

My home office is in the other end of the house, it takes ~20-30 seconds for me to get to the door. That is more time than UPS grants you.

Wilder7977 1 hour ago||||
Anyone physically near your house can just see you leaving the house and know you are not at home, besides all the other signs.

There is no control against this, and it shouldn't be something you rely on to prevent break-ins or burglaries (if you were thinking of such threats).

hnlmorg 1 hour ago||||
I don’t think anyone is fooled into thinking people are home when the home owner “answers the door” via their internet connected doorbell.

If anything, I’d say that’s a bigger give away than someone not answering a traditional door bell given people used to not hear them even when home, all the time (particularly in bigger houses).

mulderc 1 hour ago||
I would have thought this but was amazed at the number of times people would think I was home while talking to them via my doorbell. I have neighbor that told people I was rude to not come to the door and didn’t know I was talking to her from work.
hnlmorg 1 hour ago||
How long ago was that? Was this when smart doorbells were brand new tech?

I could understand peoples misconception back when such door bells weren’t known about so the default assumption people might have is that it was an intercom.

mulderc 1 hour ago||
The neighbor was 2022 or so but even more recent people have seemed a bit confused. I think having a car in the driveway makes people think we are home.
consp 1 hour ago|||
There are way more indicators than just a doorbell. Closed curtains, car not in driveway, lights out ...
mulderc 1 hour ago||
Well my curtains and light open and close on a schedule so they won’t tell them much. Also who can afford to drive to work anymore?
voidUpdate 1 hour ago||
Can you actually access any of the doorbells on the internet with this? It reads to me like you need physical access to extract the signing keys etc over the debug port before you can actually impersonate the device
interludead 49 minutes ago|
I think the distinction is: physical access helps bootstrap the research, but the resulting key/signing logic is not device-specific
philipallstar 6 minutes ago||
Can ring this Temu doorbell.
bdavbdav 1 hour ago||
Is this not more targeted at “badly developed IOT” generally as opposed to “your doorbell”? Bad title.
user01815-2 2 hours ago||
Awesome, as it doesn't actually work from the street door right now, and I can't get the condo management company to fix it. Guess I just need to post a QR code outside?
sandeepkd 1 hour ago||
Anyone is probably a hyperbole here, regardless its accessible via internet, it is always in the category of relatively secure. Applies to pretty much every device connected to internet. Absolute security is a myth, it does not exists.

One can argue that a particular manufacturer is relatively more secure than other, however as long as the software is changing/evolving, eventually it will opens up the possibility/window to hack it

consp 1 hour ago|
While true in general, this devices approach to security is an open doorway with a curtain in it to prevent access with they key hanging next to it in case there accidentally is a door. The security footprint is so low it should be called out as non existent.
6510 3 hours ago||
You could take a picture from the real footage, remove the people from it and insert yourself into the front yard. Then when they open the door act confused that you cant see them.

edit: my doorbell resets if you hold it down for 10 seconds then it takes wifi credentials with a QR code and thinks you are it's new owner.

stackghost 4 hours ago||
I'd be shocked if the Ring doorbells were materially more secure.

I sit firmly in the "only smart device is my printer and I keep a loaded gun next to it in case it makes a weird noise" camp.

nickt 3 hours ago||
You should probably get a cheap IoT camera to keep an eye on that printer!
harry8 2 hours ago|||
not "get", build it with an esp32 & Tasmota (or whatever).

https://www.aliexpress.com/item/1005010326236256.html

Bilal_io 2 hours ago|||
And then bug a camera to monitor the first camera
bonestamp2 23 minutes ago||
Exactly. All my IoT stuff is on it's own wifi network and VLAN because I don't trust the initial or long term security of some of these manufacturers.
tehlike 4 hours ago|||
I have a poe reolink camera doorbell that I am yet to install...
inventor7777 2 hours ago||
I've got the Reolink PoE doorbell and it works great!
gerdesj 14 minutes ago||
Me too.

You can put it on a separate VLAN with no internet access and watch it via your own app eg Home Assistant, Frigate, Zoneminder or whatever.

robertlagrant 4 minutes ago||
I have a Reolink but haven't got to Home Assistant yet. I'm happy switching to that, but for less technical (though still digital savvy) spouses - how would you say the switch would be for them?
random_savv 2 hours ago|||
Your printer doesn't make weird noises?
m463 2 hours ago|||
All bets are off if you use unapproved third-party toner cartridges...
Bilal_io 2 hours ago||||
Nothing unexpected or I am not used to
mrsvanwinkle 2 hours ago|||
have you tried putting a loaded wep next to it?
themafia 1 hour ago|||
The Battlestar Galactica rule. I find comfort in it as well.
aidenn0 4 hours ago|||
I would love if my printer was more dumb. It's cheaper to buy an AIO than a separate document (with duplex) and flatbed scanner.
stackghost 4 hours ago||
Nowadays smartphones do credible document scanning for most consumer use cases. iPhones had this built in before COVID at the latest.

But the printer comment was actually a reference to a meme about how different groups of people relate to technology.

Nobody on the Internet can ring my doorbell because it's a dumb button that connects to a dumb, literal bell.

aidenn0 3 hours ago|||
> Nowadays smartphones do credible document scanning for most consumer use cases. iPhones had this built in before COVID at the latest.

Now do 40 pages, front-and-back, with your smartphone.

stackghost 3 hours ago||
That's not "most consumer use cases".

I have not once in my entire life had to scan 40 pages at once. I bet I've never done more than 15 at once.

For the once in a blue moon that I need to scan 40 double-sided pages I'd just go to my local print shop.

aidenn0 3 hours ago|||
Okay I exaggerated, but 15 would be bad enough. I use the sheet-feed multiple times a year:

- Banking/Investment documents (I actually sent a fax to a bank last year because $REASONS)

- Foster-care related stuff

- Sending tax documents to my accountant

para_parolu 3 hours ago||||
I got flashbacks from preparing immigration papers…
themafia 1 hour ago|||
You might if it were drastically more convenient. I seem to have somehow acquired nearly 1 imperial pound of documentation for every year I've been alive. That's just estimating based upon the weight of my panda file box next to my desk.

There's a lot in there, rental contracts, policy documents, w2 forms, that I might actually benefit from having scanned and digitally available on my computer. I feel that being able to search through these documents would have saved me some amount of trouble over the years.

Hell, if it were easy enough, I might actually scan all those receipts I bring home and then throw away.

pests 3 hours ago|||
I mean yes and no. If I knew your address, I could 100% ring your doorbell from the Internet.

CTRL+T, doordash.com, McDonalds, "ring doorbell please", pay, done.

I know this isn't what you mean, but, humans are buttons (or button pressers?)

martheen 3 hours ago|||
To handle older cars that can't close the door by itself, Waymo (used to?) pay nearby DoorDash drivers to close it.
BLKNSLVR 3 hours ago||
Picturing the scene from Where The Buffalo Roam.

... but I think that was a fax machine.

interludead 53 minutes ago||
The most depressing part is that none of this sounds exotic
EtienneDeLyon 4 hours ago|
I wonder how I would feel about that, if I was alone at home, and lonely.

Would it cheer me that people were reaching out and ringing my doorbell?

Or would it make me sad because I would be reminded that there was not a friend ringing at the door?

mrsvanwinkle 3 hours ago||
noticed how spam has that utility for many elderly (which further incentivizes the abuse)
DonHopkins 1 hour ago||
I'd like my doorbell camera to have a cat detector and a meow detector so when my cats meow at the door, it rings the doorbell. My cats have gps collars and distinctive fur and meows, so it could double check so other cats can't spam me. That way each cat could have its own distinctive ring (like their distinctive meow, amplified).