Hacker Newsnew | past | comments | ask | show | jobs | submit | more Johnie's commentslogin

I kid you not, LG Washer's have DLCs (Downloadable Laundry Cycles). It adds no value.

https://twitter.com/Johnie/status/1744795720480411927

I had basically hooked up the washer to wifi when we first got it and forgot about it. The thing is, the washer doesn't let you disconnect the wifi after it's configured. It only allows you to switch to a different wifi and only if that wifi has internet.


Hook it up to the guest network (it prevents snooping your network) an then change the guest network password to withhold access.


Block its MAC address on your WiFi router - as long as it doesn’t keep changing its MAC address.


in that case you can use a whitelist and block all unknown MACs


so when the internet is down, you can't wash? that should not be allowed.


Meanwhile, I'm here with:

* Smart Air Filter

* Smart Air Fryer

* Smart Meat Thermometer

* Smart Sous Vide

* Smart Coffee Maker

* Smart Blinds


"Smart Blinds" are much more useful than your other examples IMHO.


I am the owner of this rogue washing machine.

If anyone has any ideas on how to investigate this, I'm open to ideas. As of now, I've just blocked the internet access.


I'd pcap a bunch of the traffic -- in particular the DNS requests -- that will tell you where it is connecting. Hopefully it is using TLS, and then the SNI headers can give you more information.

I run a local DNS resolver and so I capture all the lookup responses so that I can turn IP addresses back into names. Depending on what firewall/router you have, you may be able to log connections. I use a locally hosted free Gravwell process to grab these logs and correlate with the DNS queries to find which systems are talking to where. If your home network is like mine, then there are probably a bunch of systems that you want to block from talking outside.


For those interested, you can setup tcpdump on Asus router pretty easily to monitor traffic going through the router. You don't even need to mess with the firmware on the router.

1. Install Entware https://github.com/Entware/Entware/wiki/Install-on-Asus-stoc...

2. Then install tcpdump: `opkg install tcpdump`

From there, you can monitor any traffic going through your router.


Right now it looks like it has stopped uploading data.

Looking at my router log, the only web history request is:

2024-1-08 19:44:10 LG_Smart_Laundry2_open aic-common.lgthinq.com

This was likely after I had removed it from my main wifi and reconnected it to a segregated wifi. I don't see any logs for prior to this point.


Might be legit, LG ThinQ is their smart appliance page. And aic-common.lgthinq.com is registered to LG.

Genuinely unsure what would be taking that much data though but honestly my first guess is a bug of some kind. Kind of wondering if the App has some sort of issue reporting page on it, might be worth sending in something about it. Might not get a response, it but could get some gears turning on their end behind the scenes.



It may be worth sandboxing it into a dedicated network then analyze the traffic and see what it does in detail, for example if it accesses the local network then relays something outside, or if it opens ports waiting for connections, etc. I wonder if merely downloading so much data and storing it into its internal flash could wear it in a short time forcing the user to call for repair.


You can have fun with Wireshark https://www.wireshark.org/

Depending on the details in each of the layers[1] you might be able to spoof traffic towards it to trick it things.

you may need to try MITM the certs/key exchange stuff[2], hopefully they have a broken implementation that doesnt validate signatures etc.

[1]: https://www.bmc.com/blogs/osi-model-7-layers/

[2]: first promising hit when i googled: https://gbhackers.com/mitm-attack-https-connection-ssl-strip...


Looks like the android app at least does certificate pinning https://github.com/zimmra/frida-rootbypass-and-sslunpinning-...


I wash Really hoping for some wireshark goodness in that thread!


I can’t tell if that typo was a deliberate pun or not.


Does it stop functioning intermittently? I've seen cases of devices in the middle of a failed OTA, and the device keeps requesting the OTA again. If it's going on and offline often, this might the case.


Have you tried tcpdump’ing its payload on your router? If it’s plain text it should be obvious what it’s doing. If it isn’t you can still sniff which domains it’s connecting to from SNI ClietnHello message but payload will be encrypted. You can still get to it but that would require some decent soldering and hw debugging skills…


If you have a openwrt router than it should be quite simple. Redirect the traffic from the ip of the washing machine to a machine that has mitmproxy installed (using iptables). Hopefully the protocol is https and it doesn't have some form of certificate pinning. That should get you the raw requests/responses.


What software/router do you have, that shows this upload/download graph?


Because they have a pretty significant outstanding lending portfolio that they are on the hook for. See: https://twitter.com/adam_keesling/status/1715063558898364602...

Convoy effectively got into the factoring business and extended short term (30/60/90 days) loans to the trucking companies. Now, they don't hold these loans on their balance sheet but rather package them and sell them to lenders as asset-backed lending portfolio.

The thing with these is that typically the originator (in this case Convoy) will need to take the first tranche of losses. (This is where the $240M debt facility came in). As the freight market deteriorated, Convoy was effectively margin called by the lenders and could not come up with the money.

Any acquirer would then have to take up this debt. Even though Convoy may have a valuable asset, UPS is not in the business of managing a debt portfolio. Any acquirer would be dissuade by this baggage.


Thank you so much for the detailed response. This makes perfect sense.


In addition, you take on the debt and the loan portfolio that it's responsible for.


At first, I read that as Windows 1.1. I thought this was an old article.


It's complete when you get to sufficient scale and end up directly integrating with Chase PaymenTech.

Then you realize how much overhead it is to do a direct integration and your CFO wonders why it's payment cost is rising with all your support engineers on staff and then revert back to third party processor.


> Then you realize how much overhead it is to do a direct integration

Can you elaborate on that?


This guy Payments.


This has been around for ages. At least 20 years now. Loc-Aid had been one of the biggest provider of location data.

Here are some articles:

* https://www.nytimes.com/interactive/2018/12/10/business/loca...

* https://readwrite.com/loc-aid-the-biggest-location-s/

* https://www.technologyreview.com/2011/12/09/189247/startup-t...


Adding in, they are still around just having merged with LocationSmart: https://www.locationsmart.com/company/news/locationsmart-and...


I know some companies have tried this. It works at small scale and early on, however, over time, people want to see career progression.

Secondly, without levels, inefficiency creeps in at scale as it's not clear who the decision maker is.

Again, at small scale, this may work, but as companies grow, this becomes much harder.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: