Conversation

Notices

1. Embed this notice
   Matthew Lyon (mattly@hachyderm.io)'s status on Tuesday, 30-Jun-2026 06:30:43 JST Matthew Lyon

   I could use some networking help/advice:

   despite being out of town for over a week this month, comcast is telling me we've gone over our data allotment and used 1.5TB this month. According to them, our typical month uses about 600GB

   I've changed our wifi passwords, but I suspect that one of our internet-connected devices (air conditioner, robot vacuum & litter box, that sort of thing) has been compromised, and I’d like to try and figure out what's using bandwidth without having to disconnect things in a trial & error manner, but I'm unsure how to go about this

   I've got a 7-year old wifi router I've been meaning to replace, and I've been thinking about replacing it; I'd like to be able to see about how much bandwidth each device is using over a time period. How would I go about this?

   • Steve's Place and Ryan Castellucci (they/them) :nonbinary_flag: repeated this.
   • Embed this notice
     Matthew Lyon (mattly@hachyderm.io)'s status on Tuesday, 30-Jun-2026 06:36:20 JST Matthew Lyon

     in reply to

     • Carsten Franke

     @carstenfranke our TV is a twelve-year old plasma that doesn't have apps. Connected to it is a nearly ten-year old AppleTV box that's running the latest tvOS

   • Embed this notice
     Carsten Franke (carstenfranke@mastodon.social)'s status on Tuesday, 30-Jun-2026 06:36:21 JST Carsten Franke

     in reply to

     @mattly do you have a "smart" TV? Apps on there can act as proxy to funnel internet traffic through your network.

   • Embed this notice
     :brdRobe: (cr0w@infosec.exchange)'s status on Tuesday, 30-Jun-2026 06:39:28 JST :brdRobe:

     in reply to

     @mattly Do you have root access on the router?

   • Embed this notice
     Matthew Lyon (mattly@hachyderm.io)'s status on Tuesday, 30-Jun-2026 06:39:28 JST Matthew Lyon

     in reply to

     • :brdRobe:

     @cR0w I'm not sure how to go about this, I've just done all the config through its web interface

   • Embed this notice
     :brdRobe: (cr0w@infosec.exchange)'s status on Tuesday, 30-Jun-2026 06:50:30 JST :brdRobe:

     in reply to

     @mattly In that case, I would say your best bet is to look for a Netflow setting somewhere. I don't do much with home routers so there may not be one but it's worth a look.

   • Embed this notice
     Matthew Lyon (mattly@hachyderm.io)'s status on Tuesday, 30-Jun-2026 06:50:30 JST Matthew Lyon

     in reply to

     • :brdRobe:

     @cR0w I found something in the QoS page; apparently our dishwasher has used 700GB in the last however long. Huh.

   • Embed this notice
     Matthew Lyon (mattly@hachyderm.io)'s status on Tuesday, 30-Jun-2026 06:51:46 JST Matthew Lyon

     in reply to

     • :brdRobe:

     @cR0w my partner bought this dishwasher after reading reviews, and before realizing that you needed to use the app to do things like run a self-clean or rinse cycle, and it requires internet access to do this

     these companies should be liable for the damage their machines do when compromised

   • Embed this notice
     Matthew Lyon (mattly@hachyderm.io)'s status on Tuesday, 30-Jun-2026 07:01:36 JST Matthew Lyon

     in reply to

     I found a device/bandwidth breakdown in some obscure page of the router's admin interface

     the dishwasher's used 700+GB in the last howeverlong, my laptop using 43GB in the same time period

     my partner got this dishwasher a few years ago after reading many reviews; I've never liked it much but I liked it even less after discovering you had to use the app – via the internet – to do a rinse cycle or a self-clean

     I'm not sure how it could have become compromised; we keep all our stuff up-to-date, I don't let untrusted stuff on the network, and the only android device we have is an MP3 player / e-reader for the kid for which you can only install apps via sideloading APKs via miniSD

     Then again, it's a dishwasher company writing software in the age of vibecoding, so who knows, maybe it self-compromised

     Steve's Place repeated this.
   • Embed this notice
     Carsten Franke (carstenfranke@mastodon.social)'s status on Tuesday, 30-Jun-2026 07:03:55 JST Carsten Franke

     in reply to

     • :brdRobe:

     @mattly @cR0w great find! What brand is it? We have a Bosch on the network,

   • Embed this notice
     Matthew Lyon (mattly@hachyderm.io)'s status on Tuesday, 30-Jun-2026 07:09:00 JST Matthew Lyon

     in reply to

     thankfully my router has a parental controls thing and so I can assign the dishwasher to a persona which is forbidden from using the network, and I can disable that when needed

     seriously though, companies selling "smart" devices should be held liable for the damage their devices do when compromised

   • Embed this notice
     Carsten Franke (carstenfranke@mastodon.social)'s status on Tuesday, 30-Jun-2026 08:00:23 JST Carsten Franke

     in reply to

     • :brdRobe:

     @mattly @cR0w ah, our router does not log traffic by device... Grr... But "Bob" our dishwasher is now disconnected.

     Generally these Bosh machines are awesome, so quiet and pretty efficient.

   • Embed this notice
     Matthew Lyon (mattly@hachyderm.io)'s status on Tuesday, 30-Jun-2026 08:00:23 JST Matthew Lyon

     in reply to

     • Carsten Franke

     @carstenfranke I wouldn't have noticed this if not for the email from comcast about data use

     so I guess there's one good thing about data caps?

   • Embed this notice
     Carsten Franke (carstenfranke@mastodon.social)'s status on Tuesday, 30-Jun-2026 08:00:24 JST Carsten Franke

     • :brdRobe:

     @mattly @cR0w thanks for figuring that out, I will dig into ours...

   • Embed this notice
     Matthew Lyon (mattly@hachyderm.io)'s status on Tuesday, 30-Jun-2026 09:37:08 JST Matthew Lyon

     in reply to

     I updated my “Living Cyberpunk" page with a new item about this incident

     https://lyonhe.art/living-cyberpunk/

   • Embed this notice
     Matthew Lyon (mattly@hachyderm.io)'s status on Wednesday, 01-Jul-2026 00:31:01 JST Matthew Lyon

     in reply to

     • Hugs4friends ♾🇺🇦 🇵🇸😷
     • :brdRobe:
     • Sharkfie :100_gay:

     @Tooden @sharkfie @cR0w

     You know, this particular dishwasher was at the time the recommended pick of multiple review outlets; and nowhere did any of them mention, nor did any of the pre-available marketing material or anything my partner could find online, the fact that running just the rinse cycle or the self-clean function required an app to make it work

     Shit, it wasn’t even connected to the internet until my partner was trying to figure out how to do just a rinse cycle. She’s very sensitive to smells and apparently some of the dishes one time didn’t come out smelling quite as clean as normal. Thus, the damned thing went on the guest network

     If we had a review culture that cared about these things, if we had a functioning regulatory body to bring criminal charges against companies like BrightData, or to penalize companies for malfunctions that cause damage, perhaps this wouldn’t have happened. I want to go to there

     But that’s not our world, and I do not tolerate people who call the women in my life “stupid” because they’re not paranoid about technology. Women have enough to worry about. So you can fuck right off with that attitude.

   • Embed this notice
     Sharkfie :100_gay: (sharkfie@infosec.exchange)'s status on Wednesday, 01-Jul-2026 00:31:02 JST Sharkfie :100_gay:

     in reply to

     • :brdRobe:

     @mattly @cR0w you could be on the news https://www.newsweek.com/homeowner-baffled-washing-machine-uses-3-6gb-internet-1862675

     These companies are basically criminally negligent (as in, it is literally used for crime).

   • Embed this notice
     Hugs4friends ♾🇺🇦 🇵🇸😷 (tooden@aus.social)'s status on Wednesday, 01-Jul-2026 00:31:02 JST Hugs4friends ♾🇺🇦 🇵🇸😷

     in reply to

     • :brdRobe:
     • Sharkfie :100_gay:

     @sharkfie 'Smart' appliances, and not-so-smart appliance owners...although, is it possible to buy non-smart white goods?@mattly @cR0w

   • Embed this notice
     Matthew Lyon (mattly@hachyderm.io)'s status on Wednesday, 01-Jul-2026 03:36:13 JST Matthew Lyon

     in reply to

     • Jernej Simončič �

     @jernej__s I contacted them, they had me do a factory reset followed by "a very important update”; my current theory is that someone who helped out while we were on vacation and I gave access to our guest network (on which was the dishwasher) who has an android phone had an app on it that compromised it the way those things can compromise smart TVs

   • Embed this notice
     Jernej Simončič � (jernej__s@infosec.exchange)'s status on Wednesday, 01-Jul-2026 03:36:14 JST Jernej Simončič �

     in reply to

     @mattly Bosch? I know my sister has a Series 4 Bosch, and some programs are only available through the app; my cousin has a slightly older Series 4 Bosch, with no WiFi and can activate those programs through the button that was repurposed for WiFi on the newer model.

   • Embed this notice
     Matthew Lyon (mattly@hachyderm.io)'s status on Wednesday, 01-Jul-2026 03:42:04 JST Matthew Lyon

     in reply to

     I contacted the dishwasher company, did a factory reset and a "very important update”, and it seems to be behaving now

     my current theory now involves someone with an android phone I gave access to our guest network (on which was the dishwasher); I suspect an app on that compromised the dishwasher much like those things will compromise "smart" TVs

     ... which, perhaps I shouldn't put home devices on the guest network, but I don't trust them on the main one either

   • Embed this notice
     aburka 🫣 (aburka@hachyderm.io)'s status on Wednesday, 01-Jul-2026 04:18:43 JST aburka 🫣

     in reply to

     @mattly ...two guest networks?

   • Embed this notice
     John Deters (targetdrone@mastodon.social)'s status on Wednesday, 01-Jul-2026 13:56:13 JST John Deters

     in reply to

     @mattly "Why do you keep a gun in the kitchen drawer?"

     "If the dishwasher ever starts sending packets I don't recognize..."

   • Embed this notice
     Matthew Lyon (mattly@hachyderm.io)'s status on Wednesday, 01-Jul-2026 13:56:13 JST Matthew Lyon

     in reply to

     • John Deters

     @targetdrone I lol'd, but as a parent the lack of gun safety horrifies me

   • Embed this notice
     Matthew Lyon (mattly@hachyderm.io)'s status on Thursday, 02-Jul-2026 01:10:26 JST Matthew Lyon

     in reply to

     • Steven Reed

     @srtcd424 yeah one of my posts I said something like “then again it’s a dishwasher company writing software, so for all I know they vibecoded their way to self-compromise” and elsewhere “maybe we’ll find out in a few years what happened after the class-action works its way through the system”

   • Embed this notice
     Steven Reed (srtcd424@mas.to)'s status on Thursday, 02-Jul-2026 01:10:27 JST Steven Reed

     in reply to

     @mattly tbf there's simpler (stupid) explanations, like it being stuck in a firmware update downloading loop or something. I want to believe that botnets full of dishwashers are not a thing yet, but I'm sufficiently out of touch with the modern world that I wouldn't want to bet on it :(

   • Embed this notice
     Matthew Lyon (mattly@hachyderm.io)'s status on Thursday, 02-Jul-2026 04:36:50 JST Matthew Lyon

     in reply to

     • aspragg

     @aspragg router doesn’t say

   • Embed this notice
     aspragg (aspragg@ohai.social)'s status on Thursday, 02-Jul-2026 04:36:51 JST aspragg

     in reply to

     @mattly Is that 700+GB downloaded, or 700+GB uploaded? Or both? Or does the router not say?

   • Embed this notice
     Matthew Lyon (mattly@hachyderm.io)'s status on Saturday, 04-Jul-2026 00:47:47 JST Matthew Lyon

     in reply to

     • Dan

     @dan yeah I’m running an old router which doesn’t offer that; been looking into replacements

   • Embed this notice
     Dan (dan@social.coop)'s status on Saturday, 04-Jul-2026 00:47:48 JST Dan

     in reply to

     @mattly I turned on device isolation in my guest network for this exact reason