36

First thing I do when I get a smart appliance is scan it with nmap. This has revealed some interesting Easter eggs, like my Davis instruments air quality sensors having a local REST API.

Doing the usual scan against my GE washer and dryer shows that port 53 is listening. What could that be for? Is there a way I can at least query their status locally or something?

When I got the washer and dryer I was excited about the smart home features because getting an alert when my laundry is done or starting the washer remotely so the clothes are done when I get home are genuinely useful features. However, last time I checked the app none of that was available, so I just have these Trojan horses in my home spying on me with no benefit in exchange. Their app wanted my freaking mailing address when I signed up for their mandatory account, so the features mentioned above are the least they could offer in exchange for my digital soul. But I digress.

My fridge is in a similar situation. It commits the additional cardinal sin of ONLY being controllable via the app, with no on-board temp or filter status indicators whatsoever.

top 50 comments
sorted by: hot top controversial new old
[-] spaghettiwestern@sh.itjust.works 16 points 1 week ago* (last edited 1 week ago)

Upon installation LG's app helpfully informed me that to be notified that my LG refrigerator temperature is high or my washer's cycle is complete I am expected to inform a Korean company of my exact location at all times. The reason LG gives for this bullshit is "analytics". There is no way in hell.

I disconnected my LG appliances from wifi, deleted their spyware from my phone and duplicated the functions with Home Assistant. A couple of inexpensive sensors and a power monitoring plug provide almost all same functions without getting Korea (or the Internet) involved at all. Surprisingly this setup is much more reliable than LG's spyware too.

[-] decended_being@midwest.social 2 points 1 week ago

Which sensors did you use? I like how the oven can display how many minutes left, same with the laundry stuff.

[-] spaghettiwestern@sh.itjust.works 5 points 1 week ago* (last edited 1 week ago)

For the washer a smart plug with power monitoring. The current draw goes to almost zero when the cycle's finished. A Zigbee vibration sensor for the dryer (or another smart plug if it's a gas dryer) and temperature sensor for the fridge. All in they were less than $20.

load more comments (1 replies)
load more comments (3 replies)
[-] SeeMarkFly@lemmy.ml 15 points 1 week ago

Or the old fashion way, don't BUY them.

[-] homesweethomeMrL@lemmy.world 8 points 1 week ago

Seriously. The dryer needs a mandatory account?

That’d be a No.

[-] grue@lemmy.world 2 points 1 week ago

The trouble is, you don't know how bad the shit is until after you get it home, unless you do a large amount of research beforehand.

Frankly, at this point I think the better tactic is to buy the smart appliances and then return them as "not fit for purpose," even though that takes even more effort, because it punishes the manufacturer in a way that merely not buying the thing in the first place does not.

load more comments (13 replies)
load more comments (3 replies)
[-] Zwuzelmaus@feddit.org 8 points 1 week ago* (last edited 1 week ago)

First thing I do when I get a smart appliance is scan it with nmap.

A wonderful habit. I will try to copy it from you :)

About your main question, I can only guess that it's for the initial setup of these appliances. Initially, they know nothing about your Wifi situation. So maybe they open up their own Wifi and connect their app so that you can enter some info. Afterwards, maybe some services continue to run there...

load more comments (17 replies)
[-] MangoPenguin@lemmy.blahaj.zone 5 points 1 week ago

Maybe for mDNS so the app can discover the appliance.

[-] Greddan@feddit.org 4 points 1 week ago

The only thing LG makes that's of any value are OLED-panels. The TVs they build around them however suck ass now.

[-] Jumpingspiderman@lemmy.world 1 points 1 week ago

I’m pretty happy with our LG fridge and induction stove

load more comments (1 replies)
[-] echo@lemmy.tf 2 points 1 week ago

If you want your fridge to tell you its temp, just slap your own temp sensor in it. Put a mic by your laundry machine to detect the buzzer and alert you. DIY all the things, don't give these "smart" appliance companies money to spy on you.

[-] okamiueru@lemmy.world 2 points 1 week ago* (last edited 1 week ago)

Laundry machine can be monitored reliably with a smart socket.

Here is a blueprint for HomeAssistant that has been working well: https://community.home-assistant.io/t/detect-and-monitor-the-state-of-an-appliance-based-on-its-power-consumption-v2-1-1-updated/421670

[-] claude_flammang@dju.social 1 points 1 week ago

@okamiueru
For over one year now Homeassistant has been reliably announcing the end of the cycle by flashing all smart lights in RV before switching them back to their original state. What i like most is the fact that with the same reliability the washer beeps thirty seconds later.

The only issue I see is that getting most sensors to work in the fridge/freezer is difficult for 2 reasons, the cold fucks with the batteries and the metal body of the fridge fucks with the signal.

[-] Aussiemandeus@aussie.zone 3 points 1 week ago

Simple, just drill a hole into the fridge and use a probe from outside.

/s just in case

[-] KyuubiNoKitsune@lemmy.blahaj.zone 1 points 1 week ago* (last edited 1 week ago)

It is a legit strategy.

Or just use thin enamelled copper wire connected to the sensor and tape it down where the door closes, no drilling required.

load more comments (4 replies)
load more comments (1 replies)
[-] Greddan@feddit.org 2 points 1 week ago

None of the brands I considered when buying a new dishwasher had any spyware nor networking capability. Electrolux and Gram are both excellent and affordable. My last dishwasher was a Gram that I bought second hand for 300€, used for 12 years, and gave to the new tenant of my old apartment because I couldn't be arsed to remove it. Never had a single issue.

[-] fubarx@lemmy.world 2 points 1 week ago

Most appliances connect using a cheap microprocessor like an ESP-32 which provides both WiFi and BLE.

If there's a DNS server running, it's usually for mDNS/ZeroConf service discovery. Usually so it can easily get provisioned via a smart speaker or hub.

More details here: https://circuitlabs.net/dns-server-and-dns-sd-implementation/

[-] r0ertel@lemmy.world 1 points 1 week ago

A port scan and then inspection of the ports is a great habit. Another fun thing to do is to set up WireShark to listen to what your fridge's IP address is doing. Who is it calling? How often? What services (ports)? While your fridge may have a DNS server, unless it's been pre-loaded with the internet, it'll need to query another DNS to reach the outside world. DNS is usually unencrypted, so you can see what it's asking to connect to.

Many of these devices announce their services via Bonjour or whatever protocol. It's a way for devices like Alexa to find out that you have a printer, interrogate the printer and then Alexa will tell you that your printer is low on ink and by the way, Amazon has a special sale, just for you.

If anything is unencrypted, check it out (with WireShark). If it is encrypted, there's a chance that you can hijack it with a proxy server. Set up a SOCKS proxy and add a DNS label (I can't remember what it is) to tell the devices in your network that you have a proxy. Block the fridge from the internet and see if it will autodetect the proxy. There are other ways to tell devices that your home network requires a proxy via autodetection & wpad.dat files in specific locations on your network. You can configure your proxy to log all traffic, like WireShark does and then see what's in the payload.

I've done this with limited success on various devices. More mature products like Alexa are locked down. Those cheap home cameras from China are pretty hackable.

Have fun!

[-] early_riser@lemmy.radio 1 points 1 week ago

For those who are saying I shouldn't have bought these half-baked smart appliances, I agree. But I wasn't always this aware of the privacy issues involved. The washer and dryer were purchased before I grasped how problematic cloud-connected always online IoT devices are, and as mentioned in the OP the ability to tell me when my laundry was done seemed like a genuinely useful feature. In the case of the fridge it was an emergency replacement and we took what fit the preexisting niche in our kitchen, and the complete lack of output on the fridge itself necessitated the app.

[-] grauzone@social.tchncs.de 2 points 1 week ago

@early_riser it can get even worse. Some washingmachine manufacturers over here offer more programs to select from if you pay 10 CHF every month to them 😩

[-] early_riser@lemmy.radio 5 points 1 week ago

Nothing pops a vein quite like companies acting like a one-time expense should be a monthly fee. Paying monthly for heated seats in certain cars is where I first heard of this. They already put the hardware in the car. I guarantee they already charged you for the parts and labor to put in those heated seats when you bought the vehicle. No way they're losing money on it in the hopes you start paying them.

But I'll get off my owner's rights soapbox now.

[-] IphtashuFitz@lemmy.world 1 points 1 week ago

You mention it’s listening on port 53, but have you actually tried DNS queries to see how it responds? Will it resolve www.google.com or <reverse_ip>.in-address.arpa?

[-] nosuchanon@lemmy.world 1 points 1 week ago

Set up a pihole on your network and add a few block lists. If your IoT appliances phone home at least you can block the traffic and monitor what things phone home.

As for buying appliances that are not smart, It takes extra effort and a trade-off in features.

For example, my toothbrush has Bluetooth in it. if I want a non-Bluetooth toothbrush I’d have to get a lower quality model because they simply don’t make one without it.

Most people buy whatever’s on sale, And considering how expensive home appliances are they usually put the expensive featured models on sale since there’s a bigger margin.

So if I wanted to get a basic one with less features, that’s not smart it would actually be more expensive because it will never go on sale.

[-] ylph@lemmy.world 1 points 1 week ago

pihole often doesn't help, as many IoT devices either use their own DNS servers and ignore the one provided by your network, and sometimes even skip DNS completely and just connect to hardcoded IPs directly. Even blocking DNS at the firewall/router is getting more difficult with increasing use of DNS over HTTPS and custom DNS server IPs that aren't in public lists. (I block all known DNS server IPs at my firewall, forcing any device to use my own DNS servers, but even that is not always completely effective)

It's usually best to isolate IoT devices on VLANs with no internet access (blocked at the router/firewall) Although there are now even devices that can autonomously connect to external WiFi networks like Amazon Sidewalk, to gain internet access and bypassing any restrictions you might try to place on them..

load more comments
view more: next ›
this post was submitted on 04 Oct 2025
36 points (100.0% liked)

homeassistant

16505 readers
36 users here now

Home Assistant is open source home automation that puts local control and privacy first.
Powered by a worldwide community of tinkerers and DIY enthusiasts.

Home Assistant can be self-installed on ProxMox, Raspberry Pi, or even purchased pre-installed: Home Assistant: Installation

Discussion of Home-Assistant adjacent topics is absolutely fine, within reason.
If you're not sure, DM @GreatAlbatross@feddit.uk

founded 2 years ago
MODERATORS