Man discovers his parents' coffee machine used 1TB of data in 10 days

In the Twitter thread linked, the person confirms two things:1. It saturated the local network with 1TB of metadata sniffing scans, not the network uplink to the outside world.2. It does so because, as Keurig notes, it’s collecting data about your household in order to let Keurig sell it to advertisers. reply: > as Keurig notes, it’s collecting data about your household in order to let Keurig sell it to advertisers.WTF!! When did we land in the middle of a Black Mirror episode?I'm half convinced the first run of the LHC split the timeline and we've landed in the evil one.

I'm sceptical only because this is a screen shot of unifi client info, and unifi seems to have some bug that will report devices as using terabytes of data in the last 24 hours, which is obviously not true..Here's an example from my unifi dash right now, my laptop has done 24tb of data? lol email and web browsinghttps://imgur.com/a/I54vcYR reply: I posted the same below, they’ve had similar bugs for the ~decade I’ve used them.

I'm not the most versed with networking or operating systems but I wonder how difficult it would be to program a raspberry pi to poison the datasets of these types of things. Program it to impersonate a wide set of devices and randomly respond as such in a home. Or even if it would be worth it. Maybe if a phone app could do it too that would make it easy to poison the dataset only when you purchase new smart devices while they do their heavier reconnaissance during the first few weeks (assuming Keurig and the like calm down a bit after some period of time). reply: If I had a machine like this on my network, I'd be tempted to figure out where it's sending the telemetry data, and help it out by sending a LOT more. It would be funny if they blocked my IP because I was reporting too much data.

This website values your privacy. Only shares data with 1747 partners.

The real question is: could someone explain me why anyone would want a smart coffee maker?What kind of functions it has that can't be replaced by:- walking a few meters and pushing a physical button- waiting a whopping minute for coffee to brew, instead of triggering it remotely reply: I have an admittedly very specific set of constraints that led to me buying a wifi kettle. I:- have a short window to get to the train in the morning - want coffee on the train - don't particularly like drip machine coffee - want the water boiling when I wake up so that I can make coffee and get out of the house as quickly as possible - am more morally opposed to waking up five minutes earlier (pushing my wake time into the 4 o'clock hour) than I am to having a smart device.I couldn't find a kettle that runs on a timer, and just taping the switch in the "on" position and hooking it up to a plug timer felt unsafe, so getting a stupid wifi kettle and using their stupid app to set it to auto-start was the best option. It's on its own network, though.

So, separate VLANs, wifi isolation and complete internet blocking for all devices such as this, and only purchase devices that can be controlled via Home Assistant.What hope do normies have? reply: You don't need separate VLANs, wifi isolation and firewalls. You need to reconsider putting a coffee machine on the internet lol.

Two mistakes in the title.- A coffee machine should not be broadcasting anything. - Stop drinking coffee and go outside and enjoy the great outdoors.

Nobody has mentioned this but the tweet in question is a screenshot of a UniFi dashboard which is notorious for miscalculating bandwidth usage. reply: Get out of here with your reasonable explanations, we're having a hissy-fit and a lynching!

It's so important to have a dedicated VLAN (or 2.4g SSID) for IoT devices and block access to your regular VLAN/SSID or enforce some more granular rules on what devices can communicate with each other.Most non-ancient routers/gateways support this. There are way too many IoT devices running code that's _worse_ than what older LLMs produce.

I recently had a delivery to my Kaiser office in Portland. It was printer ink! My printer had run out of ink. Except, I don't own a printer, and I've never owned one that self-reorders ink. Someone at some time had registered their printer to my office address and enabled self-reordering of printer ink.

The only thing that I will add is that if you buy a smart appliance, you totally deserve this.At my local home depot where I shop, there is like 1 of each type of appliance that has any type of smarts, and each one is always the most expensive. All the rest, and more reasonable, are dumb. No apps, no wifi, etc. I'm not usually a guy who cheaps out on stuff, but I also know when I'm overpaying, and would never pay $2,000 for a fridge just because it has a giant screen (and now shows ads apparently...ahem...samsung)I have 3 Keurig coffee makers, and they are dumb as a brick.If you buy something that can connect to wifi/the internet, please understand that you are never actually buying it. You are actually only renting it. Either you pay the price via lack of privacy, or you pay the price via subscription...and the company at the other end of the deal controls which bargain you get...you have no input.Keurig could brick all their smart coffee makers tomorrow and demand users cough up $30/mo, and users would then have to decide on whether they should toss their coffee makers or pay up.I'm not saying it's right....

I recently did the following:- switch between my network and the cable router- one port on the switch is set to "mirror mode"- hooked up that port to a dedicated ethernet port on one of my boxesWhy do this?Because if I run a tcpdump on that interface I see ALL of the traffic passing through the switch which includes all outbound and inbound traffic from my devices.One interesting thing I've already discovered:My oven sends random unencrypted keepalive messages over regular HTTP (not HTTPS) to an EC2 server.I'm very curious to see if that changes over time.

Can someone explain to me what kind of data it collects, and what value could that data have to advertisers or anyone else?

Time to develop an open source tarpit for these types of devices. Return data endlessly about fake network devices to overwhelm them and obfuscate your real devices.

Wow, maybe this is the push I need to finally set up an isolated "IOT" VLAN at my home.

question for those who use it: is it necessary to put the machine in the local network in order for it to work?

This website generated 1tb of bandwidth while serving me 1kb of text

Never assume malicious intent when incompetence.I have multiple devices that queries their update server every 15 seconds, which all shows up as the top 10 queried domain in my network.

I would require IoT devices to pass a rigorous certification process, like we do for RF devices.

Just imagine the devs on the other end trying to parse petabytes of data. It's breakfast on the East coast, all hands on deck.

"Nomad explained that he had worked in IT for more than 10 years and decided to look further into what had happened."I was hoping this post would say what happened and what kinds of packets it was sending.

Holy moly - 1,747 “partners” to share my data with. I mean, how can you even find 1747 data brokers? Where do you get that list. What does the JavaScript look like - I mean … this is getting ridiculous.But at least the EU did me a solid. I really wanted to read that but I think 2000 data scumbags is not worth the effort.All I need know is to realise bottlecaps must be recycled and federalism is good. Repeat in the mirror each morning

Why does a coffee machine need internet?

Maybe the coffee machine is subsidized by a residential botnet?

Probably because everyone is suffering from benchmark fatigue at this point. Until it handles real-world chaotic production edge cases without silent degradation, it's just another speed-run metric.

can't even make a coffee at home without being tracked

VLANs, people. And firewall policies.

A year or two ago, I was using NextDNS in ad-blocking and logging mode, which very helpfully exposed malware sitting on my very router, which had been completely undetectable, except for the veritable flood of bizarre DNS queries it was routinely sending to the self-configured DNS servers.Now that I have a new router and I've re-enabled NextDNS, I've ironically discovered that the chief abuser of DNS right now is the router's own legit security software, which is absolutely hammering on the same query, several times a second.Of course, since I am currently on NextDNS free tier, this matters a lot, because they cut you off after about 300,000 queries in a month. So any hammering abuse will make me lose my privileges much earlier than I would otherwise. So, to stop the abuse, should I shut off my legit security software? It is absolutely rubbish at identifying malware on the device itself...