Comment Comment by echelon This could go very bad for Sonos.Imagine a virus that looks for Sonos devices on a network and bricks them all via "recycle mode"!The API probably isn't even locked down. I think it's unauthenticated SOAP/UPnP.An even dumber attack: guests with your wifi credentials can download the Sonos app and break your gear. It's entirely unauthenticated. parent echelon 6 years ago
Imagine a virus that looks for Sonos devices on a network and bricks them all via "recycle mode"!
The API probably isn't even locked down. I think it's unauthenticated SOAP/UPnP.
An even dumber attack: guests with your wifi credentials can download the Sonos app and break your gear. It's entirely unauthenticated.