Hacker News new | ask | show | jobs
by newsbinator 2814 days ago
If the courts rely on these devices, then these devices will log users.

So if a second person puts on your device, and their physical numbers (heartrate, gait, perspiration, etc) differ from yours, you can get a notification, just like when you log into your email from an unknown location.

1 comments

I immediately thought about something like a jailbreak for the device where an attacker could attach a computer, run an exploit, and upload whatever data he predetermined. After the code was run it would leave no trace behind and hard to prove otherwise for the owner.
You might also be able to just alter the requests the fitbit sends to the servers to save the data from the device to show what you want (heart rate stopping at another time, differing heart rates, living for two more hours giving you time for an alibi).