Comment by ssl-3
1 day ago
That's a very nice-looking kettle. Having looked at it, I agree with you completely. It seems rather unlikely that it would turn into a manufacturer-supported attack vector.
We do have a different out-of-band/disconnected/not-wifi way of doing firmware things, and perhaps we should use it more than we do: Bluetooth. It's about as universal as it gets.
I mean: Imagine a Venn diagram, with two groups. One group represents people who update the firmware in their kettles. The other group represents people who have Bluetooth-capable pocket supercomputers.
The two groups overlap so neatly that the diagram is indistinguishable from a circle. :)
Oh yeah, that's a good point, Bluetooth would actually be marketable product. Though my preference is not needing a mobile app, if they used Bluetooth and made it HomeKit compatible, then they could also push firmware updates over the Bluetooth connection from an Apple home hub.