Hacker News new | ask | show | jobs
by lisper 2769 days ago
This looks very cool but you should think twice before you use it. If a hacker wanted to infiltrate your LAN, there would be no better way to do it than to provide a tool like this.
1 comments

But this is just the process of connecting it to a wireless network, which would be the hacker's network? The risk seems pretty contrived?

You could make the same argument for other assisted headless installations: speakers, smart plugs, etc.

> You could make the same argument for other assisted headless installations: speakers, smart plugs, etc.

That's true, but in those devices can be isolated from the internet by a firewall. Berrylan can't be, or it loses its utility. In order to talk to the app, Berrylan has to send packets to and receive packets from the internet. Also, even after the setup, most RaspPi applications entail having the computer continue to have access to the internet. So the situation is much risker with the RaspPi.

Doesn't this just work over Bluetooth for the initial config? The internet isn't useful at this point because it isn't connected to a WLAN.
Ah, that's a good point.