Re: [mh] relinking devices after PLM change?

You'd need custom hardware to do it. The insteon chipsets in the PLM mask
(2?) bytes of the Insteon ID when in monitor mode and the device isn't in
the ALDB. But yes, nobody ever said the protocol is secure and shouldn't be
treated as such. Just like you could brute force the possible combinations
if you really wanted to.

So it's not "secure" but it's quite a bit more secure than it used to be.

On Sun, Dec 6, 2020 at 1:36 PM Marc MERLIN <[email protected]> wrote:

> On Sun, Dec 06, 2020 at 12:51:27PM -0500, Spencer Ryan wrote:
> > 100% sure. I've never used the set button on any of my ~30 devices (all
> > I2CS) for linking except for a factory reset.
> >
> > The "Security" is you have to know the destination ID to initiate a
> remote
> > linking.
>
> I see.
>
> In that case, that's no security, you can listen on the insteon network
> via powerline or RF and snoop all the IDs
>
> So, pre I2CS, devices accepted commands before being linked. Do you know
> why I2CS added this linking requirement, if it can be done remotely, and
> adds no security at all?
>
> I don't know if you can buy an off the shelf Insteon RF
> sniffer/injector, but you can probably make one pretty easily. Then, all
> you have to do is drive around until you see insteon signals, listen fo
> IDs, blast an on command to all of them until the garage door hopefully
> opens?
>
> Marc
>
> PS: I use an out of band command to power off my garage doors when I'm
> not at home, but I'm sure most people, don't.
> --
> "A mouse is a device used to point at the xterm you want to type in" -
> A.S.R.
>
> Home page: http://marc.merlins.org/                       | PGP
> 7F55D5F27AAF9D08
>

________________________________________________________
To unsubscribe from this list, go to: https://lists.sourceforge.net/lists/listinfo/misterhouse-users