187

First thing I do when I get a smart appliance is scan it with nmap. This has revealed some interesting Easter eggs, like my Davis instruments air quality sensors having a local REST API.

Doing the usual scan against my GE washer and dryer shows that port 53 is listening. What could that be for? Is there a way I can at least query their status locally or something?

When I got the washer and dryer I was excited about the smart home features because getting an alert when my laundry is done or starting the washer remotely so the clothes are done when I get home are genuinely useful features. However, last time I checked the app none of that was available, so I just have these Trojan horses in my home spying on me with no benefit in exchange. Their app wanted my freaking mailing address when I signed up for their mandatory account, so the features mentioned above are the least they could offer in exchange for my digital soul. But I digress.

My fridge is in a similar situation. It commits the additional cardinal sin of ONLY being controllable via the app, with no on-board temp or filter status indicators whatsoever.

top 50 comments
sorted by: hot top controversial new old
[-] Greddan@feddit.org 11 points 1 day ago

The only thing LG makes that's of any value are OLED-panels. The TVs they build around them however suck ass now.

[-] early_riser@lemmy.radio 1 points 23 hours ago

Reject TV. Return to monitor. Yeah monitors don’t come in the same sizes as TVs, but if you just want something that shows you whatever you feed its video ports without any bloat than a monitor works great.

[-] stoicmaverick@lemmy.world 2 points 1 day ago

They make some of the better 18650 battery cells too.

[-] Jumpingspiderman@lemmy.world 1 points 1 day ago

I’m pretty happy with our LG fridge and induction stove

[-] thatKamGuy@sh.itjust.works 3 points 1 day ago

If your fridge has a linear compressor; have a look online if your particular model is impacted by excessive failures.

Ours lasted around 3 years before kicking the bucket, despite the 10yr “warranty” (which only covered parts, and not call-out fees or labour) - only for it to be deemed uneconomical to repair.

We lost all of our food, but we did at least get a full refund. Ended up going with a Hitachi after multiple recommendations and review scouring, and haven’t been happier!

[-] early_riser@lemmy.radio 14 points 2 days ago

For those who are saying I shouldn't have bought these half-baked smart appliances, I agree. But I wasn't always this aware of the privacy issues involved. The washer and dryer were purchased before I grasped how problematic cloud-connected always online IoT devices are, and as mentioned in the OP the ability to tell me when my laundry was done seemed like a genuinely useful feature. In the case of the fridge it was an emergency replacement and we took what fit the preexisting niche in our kitchen, and the complete lack of output on the fridge itself necessitated the app.

[-] Tangent5280@lemmy.world 3 points 1 day ago

Hey, it might help to get email aliases. Mailbox and fastmail offer them - I think most paid email services do. It helps me keep the services I have to sign up for isolated from my main email.

[-] early_riser@lemmy.radio 1 points 23 hours ago

Already do that via a custom domain and SimpleLogin/Proton.

[-] MouldyCat@feddit.uk 1 points 1 day ago

Firefox has Firefox Relay, which lets you create aliases (they call them masks) for one destination email for free

https://relay.firefox.com/

[-] thatKamGuy@sh.itjust.works 1 points 1 day ago

Apple also offer a similar service, if you so happen to own an iPhone.

Has been really useful for identifying which vendors and websites on-sold my data!

[-] grauzone@social.tchncs.de 3 points 2 days ago

@early_riser it can get even worse. Some washingmachine manufacturers over here offer more programs to select from if you pay 10 CHF every month to them 😩

[-] early_riser@lemmy.radio 6 points 1 day ago

Nothing pops a vein quite like companies acting like a one-time expense should be a monthly fee. Paying monthly for heated seats in certain cars is where I first heard of this. They already put the hardware in the car. I guarantee they already charged you for the parts and labor to put in those heated seats when you bought the vehicle. No way they're losing money on it in the hopes you start paying them.

But I'll get off my owner's rights soapbox now.

[-] lka1988@lemmy.dbzer0.com 1 points 18 hours ago

If I had the means, I would buy a car with that "feature" just to hardwire it myself. Out of spite.

I have an EE degree, I know how to properly wire things in a car (done it safely for decades) - heated seats are no different.

[-] Greddan@feddit.org 6 points 1 day ago

None of the brands I considered when buying a new dishwasher had any spyware nor networking capability. Electrolux and Gram are both excellent and affordable. My last dishwasher was a Gram that I bought second hand for 300€, used for 12 years, and gave to the new tenant of my old apartment because I couldn't be arsed to remove it. Never had a single issue.

[-] spaghettiwestern@sh.itjust.works 56 points 2 days ago* (last edited 2 days ago)

Upon installation LG's app helpfully informed me that to be notified that my LG refrigerator temperature is high or my washer's cycle is complete I am expected to inform a Korean company of my exact location at all times. The reason LG gives for this bullshit is "analytics". There is no way in hell.

I disconnected my LG appliances from wifi, deleted their spyware from my phone and duplicated the functions with Home Assistant. A couple of inexpensive sensors and a power monitoring plug provide almost all same functions without getting Korea (or the Internet) involved at all. Surprisingly this setup is much more reliable than LG's spyware too.

[-] decended_being@midwest.social 7 points 2 days ago

Which sensors did you use? I like how the oven can display how many minutes left, same with the laundry stuff.

[-] spaghettiwestern@sh.itjust.works 12 points 2 days ago* (last edited 2 days ago)

For the washer a smart plug with power monitoring. The current draw goes to almost zero when the cycle's finished. A Zigbee vibration sensor for the dryer (or another smart plug if it's a gas dryer) and temperature sensor for the fridge. All in they were less than $20.

[-] early_riser@lemmy.radio 4 points 2 days ago

I'll have to try that smart plug idea. I have some heavy duty Z-wave plugs I used for Christmas decorations last year and that would work great for the fridge.

load more comments (3 replies)
[-] SeeMarkFly@lemmy.ml 74 points 3 days ago

Or the old fashion way, don't BUY them.

[-] homesweethomeMrL@lemmy.world 28 points 3 days ago

Seriously. The dryer needs a mandatory account?

That’d be a No.

[-] grue@lemmy.world 16 points 2 days ago

The trouble is, you don't know how bad the shit is until after you get it home, unless you do a large amount of research beforehand.

Frankly, at this point I think the better tactic is to buy the smart appliances and then return them as "not fit for purpose," even though that takes even more effort, because it punishes the manufacturer in a way that merely not buying the thing in the first place does not.

[-] JandroDelSol@lemmy.world 1 points 1 day ago

i dunno if imma spend hundreds of dollars on something I'm gonna do research

load more comments (13 replies)
load more comments (6 replies)
[-] Zwuzelmaus@feddit.org 48 points 3 days ago* (last edited 3 days ago)

First thing I do when I get a smart appliance is scan it with nmap.

A wonderful habit. I will try to copy it from you :)

About your main question, I can only guess that it's for the initial setup of these appliances. Initially, they know nothing about your Wifi situation. So maybe they open up their own Wifi and connect their app so that you can enter some info. Afterwards, maybe some services continue to run there...

load more comments (16 replies)
[-] nosuchanon@lemmy.world 4 points 2 days ago

Set up a pihole on your network and add a few block lists. If your IoT appliances phone home at least you can block the traffic and monitor what things phone home.

As for buying appliances that are not smart, It takes extra effort and a trade-off in features.

For example, my toothbrush has Bluetooth in it. if I want a non-Bluetooth toothbrush I’d have to get a lower quality model because they simply don’t make one without it.

Most people buy whatever’s on sale, And considering how expensive home appliances are they usually put the expensive featured models on sale since there’s a bigger margin.

So if I wanted to get a basic one with less features, that’s not smart it would actually be more expensive because it will never go on sale.

[-] ylph@lemmy.world 4 points 1 day ago

pihole often doesn't help, as many IoT devices either use their own DNS servers and ignore the one provided by your network, and sometimes even skip DNS completely and just connect to hardcoded IPs directly. Even blocking DNS at the firewall/router is getting more difficult with increasing use of DNS over HTTPS and custom DNS server IPs that aren't in public lists. (I block all known DNS server IPs at my firewall, forcing any device to use my own DNS servers, but even that is not always completely effective)

It's usually best to isolate IoT devices on VLANs with no internet access (blocked at the router/firewall) Although there are now even devices that can autonomously connect to external WiFi networks like Amazon Sidewalk, to gain internet access and bypassing any restrictions you might try to place on them..

[-] Tangent5280@lemmy.world 5 points 1 day ago

Devices that connect to external wifi immediately gets the pliers and soldering gun treatment and a hole where their wifi chip used to be

[-] MangoPenguin 13 points 2 days ago

Maybe for mDNS so the app can discover the appliance.

[-] IphtashuFitz@lemmy.world 24 points 3 days ago

You mention it’s listening on port 53, but have you actually tried DNS queries to see how it responds? Will it resolve www.google.com or <reverse_ip>.in-address.arpa?

[-] r0ertel@lemmy.world 22 points 3 days ago

A port scan and then inspection of the ports is a great habit. Another fun thing to do is to set up WireShark to listen to what your fridge's IP address is doing. Who is it calling? How often? What services (ports)? While your fridge may have a DNS server, unless it's been pre-loaded with the internet, it'll need to query another DNS to reach the outside world. DNS is usually unencrypted, so you can see what it's asking to connect to.

Many of these devices announce their services via Bonjour or whatever protocol. It's a way for devices like Alexa to find out that you have a printer, interrogate the printer and then Alexa will tell you that your printer is low on ink and by the way, Amazon has a special sale, just for you.

If anything is unencrypted, check it out (with WireShark). If it is encrypted, there's a chance that you can hijack it with a proxy server. Set up a SOCKS proxy and add a DNS label (I can't remember what it is) to tell the devices in your network that you have a proxy. Block the fridge from the internet and see if it will autodetect the proxy. There are other ways to tell devices that your home network requires a proxy via autodetection & wpad.dat files in specific locations on your network. You can configure your proxy to log all traffic, like WireShark does and then see what's in the payload.

I've done this with limited success on various devices. More mature products like Alexa are locked down. Those cheap home cameras from China are pretty hackable.

Have fun!

[-] the_q@lemmy.zip 16 points 3 days ago

No one needs "smart" appliances. I know it's fun to get a message telling you your water filter needs replacing, but come on...

[-] ThunderQueen@lemmy.world 14 points 2 days ago

The fact people trust these devices to not push a replacemnt before it is actually necessary in the name of profit baffles me.

load more comments (3 replies)
[-] deathbird@mander.xyz 5 points 2 days ago

Listen man I want smart everything. I want a fridge that tells me if I left the door open and when I last replaced the filter and if the OJ is out and then automatically asks if it should add more OJ to the grocery list.

And this can all be accomplished with modern technology without sending my data to an outside entity. It should be, even if it isn't. So much of the sci-fi future we used to dream of can be a reality today, we just have to mold it into being.

[-] Slatlun@lemmy.ml 3 points 1 day ago

This is absolutely the most annoying part. I would be all in on smart whatevers if they worked like they should (ie respecting privacy by design). As it is, I will only buy appliances with no internet capabilities because I don't want to spend time securing them.

load more comments (12 replies)
[-] fubarx@lemmy.world 14 points 3 days ago

Most appliances connect using a cheap microprocessor like an ESP-32 which provides both WiFi and BLE.

If there's a DNS server running, it's usually for mDNS/ZeroConf service discovery. Usually so it can easily get provisioned via a smart speaker or hub.

More details here: https://circuitlabs.net/dns-server-and-dns-sd-implementation/

[-] echo@lemmy.tf 9 points 2 days ago

If you want your fridge to tell you its temp, just slap your own temp sensor in it. Put a mic by your laundry machine to detect the buzzer and alert you. DIY all the things, don't give these "smart" appliance companies money to spy on you.

[-] okamiueru@lemmy.world 10 points 2 days ago* (last edited 2 days ago)

Laundry machine can be monitored reliably with a smart socket.

Here is a blueprint for HomeAssistant that has been working well: https://community.home-assistant.io/t/detect-and-monitor-the-state-of-an-appliance-based-on-its-power-consumption-v2-1-1-updated/421670

load more comments (2 replies)
load more comments (10 replies)
load more comments
view more: next ›
this post was submitted on 04 Oct 2025
187 points (100.0% liked)

homeassistant

16424 readers
53 users here now

Home Assistant is open source home automation that puts local control and privacy first.
Powered by a worldwide community of tinkerers and DIY enthusiasts.

Home Assistant can be self-installed on ProxMox, Raspberry Pi, or even purchased pre-installed: Home Assistant: Installation

Discussion of Home-Assistant adjacent topics is absolutely fine, within reason.
If you're not sure, DM @GreatAlbatross@feddit.uk

founded 2 years ago
MODERATORS