[voidUpdate]

Can you actually access any of the doorbells on the internet with this? It reads to me like you need physical access to extract the signing keys etc over the debug port before you can actually impersonate the device

[interludead]

I think the distinction is: physical access helps bootstrap the research, but the resulting key/signing logic is not device-specific

[porshia]

You can enumerate them against the API.