"Google officially turned off remote control functionality for early Nest Learning Thermostats last month, but it hasn't stopped collecting a stream of data from these downgraded devices. After digging into the backend, security researcher Cody Kociemba found that the first- and second-generation Nest Learning Thermostats are still sending Google information about manual temperature changes, whether a person is present in the room, if sunlight is hitting the device, and more."
"Kociemba made the discovery while participating in a bounty program created by FULU, a right-to-repair advocacy organization cofounded by electronics repair technician and YouTuber Louis Rossmann. FULU challenged developers to come up with a solution to restore smart functionality to Nest devices no longer supported by Google, and that's exactly what Kociemba did with his open-source No Longer Evil project. But after cloning Google's API to create this custom software, he started receiving a trove of logs from customer devices, which he"
Google disabled remote control for first- and second-generation Nest Learning Thermostats, but those devices still transmit sensor and usage data to Google. Security researcher Cody Kociemba found that the thermostats report manual temperature changes, room presence, sunlight hitting the device, humidity, and other signals. Kociemba was participating in a FULU bounty program, a right-to-repair initiative cofounded by electronics repair technician and YouTuber Louis Rossmann. Kociemba developed an open-source No Longer Evil project that clones Google's API to restore smart functionality. After cloning the API to run the custom software, he began receiving extensive logs uploaded from customer devices.
Read at The Verge
Unable to calculate read time
Collection
[
|
...
]