Comment

Comment by BinaryIdiot

As far as I can tell the master key of ZigBee pairing has been extracted and posted. This is used when pairing a new device to a ZigBee network which is used by many home automation devices (such as SmartThings).

Also, and please correct me if I'm wrong, but the attack window is very narrow in that you have to be close to the source and you have to reset the device (or use a new device) in order to really do anything. Not sure how much of a risk this is at the moment.

parent BinaryIdiot 11 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton