168

Ah yes, smart lights need Tor.(lemm.ee)

posted
by
Avatar
errorlab@lemm.ee
in
Avatar
privacy@lemmy.ml
41 comments
hidereport

I have this old TP-Link smart lightbulb, it’s the only thing that’s IoT and on WiFi in my house.

Looking through pfBlocker logs for fun, and noticed it’s been trying to connect to the Tor network.

Oh! Also, it’s been uploading and downloading 100+ MB of data a day.

Sort:
HotTopControversialNewOld
You are viewing a single thread.
View all comments
Avatar
StarkZarn@infosec.pub
110 points

It’s just an NTP pool. The device is trying to update it’s time. Likely it made many other requests to other servers when this one didn’t work.

Maintaining up to date lists of anything is a game of whack a mole, so you’re always going to get weird results.

If you’re actually unsure, pcap the traffic on your pfsense box and see for yourself. NTP is an unencrypted protocol, so tshark or Wireshark will have no problem telling you all about it.

That said, I’d still agree with the other poster about local integration with home assistant and just block that sucker from the Internet.

permalink
report
reply
Avatar
czardestructo@lemmy.world
3 points

Agreed. To add to this because the traffic is being blocked it keeps retrying so it’s inflating the traffic size. I have about 14 tplink WiFi switches on a vlan and my pfsense rule for NTP is less than 6 megabytes. OP is conflating legitimate NTP traffic with Tor.

permalink
report
parent
reply
Avatar
MonkderZweite@feddit.ch
3 points

NTP is an unencrypted protocol, so tshark or Wireshark will have no problem telling you all about it.

Wait, it is? Pretty sure chrony.conf has some auth stuff in it.

permalink
report
parent
reply
Avatar
Bronco1676@lemmy.ml
10 points

Authentication != Encryption

permalink
report
parent
reply
Avatar
MonkderZweite@feddit.ch
2 points

Right.

permalink
report
parent
reply
Avatar
lemming741@lemmy.world
2 points
*

Similar to forwarding all DNS traffic to my pihole, I also forward 123 to the opnsense NTP server.

permalink
report
parent
reply

Privacy

!privacy@lemmy.ml

Create post

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
  • Don’t promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

Community stats

  • 7.6K

    Monthly active users

  • 2.7K

    Posts

  • 74K

    Comments

Community moderators