[ad_1]
Kyasupā wondered if he could disrupt the control of his iPod Touch hotel when he offered to let him in, but he did not want to waste his vacation time to change the machine. He reportedly changed his mind after a noisy friend kept him for several days. “I thought it would be nice if I could take care of his room and make him have a good night,” he writes. “That’s how I decided to start looking at how it all works.”
The iPods that the hotel released as remotes were locked by the iOS device for “access control” which prevents users from leaving the Nasnos remote monitoring app. But Kyasupā found that he could simply allow the iPod battery to restart and restart it to meet all the demands – a solid restart and advanced notification – and the iPod did not have a portable PIN. He then noticed that the iPod connects via Wi-Fi to the Nasnos router – each room seems to have its own – which is connected via radio to other digital devices that were in the room like its lights, fan, and mattress.
To address the rules of the app from iPod to Nasnos router, Kyasupā knew he had to get a password in order to use that router. But surprisingly, they found that Nasnos operators used WEP encryption haphazardly, a type of Wi-Fi security that has been known for years to be unlikely. “Given that WEP is still being implemented in 2019, it is crazy,” he writes. Using the AircrackNG software, he forced the router’s passwords and connected them from this laptop. He was then able to use his Android phone as a Wi-Fi hotspot, connect the iPod to its location, and run his laptop. Finally he connected the laptop to the Nasnos router via Wi-Fi and used the device as an intermediary to listen to all iPod connections with the router.
Kyasupā then tried every activity in the program – such as turning on the lights and turning it off, changing the bed into a bed, and so on – and compiling the information packs that everyone sent. Because the Nasnos app did not use real authentication or encryption in connection to the router other than the WEP Wi-Fi connection, they were able to connect the room router to its laptop instead and revert the commands to trigger the same changes.
Kyasupā still faced the task of figuring out how to connect routers to other rooms. But in the meantime, he said, he left the hotel to visit another city, returned a few days later, and was offered another room in the hotel. After revealing the secret of the room’s router, he, too, discovered that it contained only four letters different from the original. The failure of the unchanged passports makes it possible for him to force all the secrecy of the other rooms in the hotel capsule.
In the late afternoon when the hotel was empty, Kyasupā said, he went to the room of his old neighbor – the culprit was still in the hotel, said the robber – and found the room’s secret ID and stood outside and tested the lights to see if he had the right target. That same night, as he tells them, he set up his laptop to launch his script. He says he does not know how his target came about; Kyasupā slept all night, and did not see the neighbor again before he left. “I hope he had a good night,” Kyasupā wrote. “Personally, I sleep like a baby.”
After his visit, Kyasupā allegedly sent an email to the hotel to inform them of their plight, and also shared his findings with the Nasnos, who did not respond. He also said the hotel solved the problems he told them about, and changed its Nasnos routers to WPA encryption to make their passwords more complex. He warns that anyone who uses Nasnos machines should also make sure that they are not using WEP, and if there are several routers in the same house as the hotel, give everyone a password that cannot be obtained from each other or easily forced.
To a senior guest at the capsule hotel who is said to have tried his tricks, Kyasupā offers a different perspective on the matter. “I hope he will have more respect for his neighbors in the future,” he says, “and that he is not afraid of ghosts.”
Many Great Stories
[ad_2]
Source link
