HN Theater @HNTheaterMonth

The best talks and videos of Hacker News.

Hacker News Comments on
Fitbit Firmware Modifications and Data Extraction

media.ccc.de · 101 HN points · 0 HN comments
HN Theater has aggregated all Hacker News stories and comments that mention media.ccc.de's video "Fitbit Firmware Modifications and Data Extraction".
Watch on media.ccc.de [↗]
media.ccc.de Summary
Security architectures for wearables are challenging. We take a deeper look into the widely-used Fitbit fitness trackers. The Fitbit ecos...
HN Theater Rankings

Hacker News Stories and Comments

All the comments and stories posted to Hacker News that reference this video.
Dec 30, 2017 · 101 points, 17 comments · submitted by DyslexicAtheist
nimbius
The biggest problem with fitbit is the DRM. If there is a means to prevent the firmware from encrypting the data it collects from the wearer that would be fantastic, otherwise we're really just accepting fitbits analytics without independent verification of the data.
saguro
It's worse than just having to trust their metrics. Last time I looked, you can't access your own realtime heart rate no matter what - it was only available to 'registered partners' or some shit. When I was looking, their partners page had a demo video of a crowd watching a football match, and had that overlaid with the heart rates of the fans. So basically, next level sentiment monitoring and advertising capabilities.

So actually, Fitbit is in the business of collecting high resolution fitness data which they onsell to 'partners', and they've managed to convince the public to PAY to have this data collected about them in exchange for really coarse aggregated statistics which are an order of magnitude less useful than what Fitbit extracts from the raw data and keeps for themselves.

Fitbit's marketing strategy is the work of evil geniuses.

mettamage
I just got a fitbit for my birthday and I would like to program apps for it. I'd like it to know when I meditate, for example. I find it a pity that it's so locked up as it is. If people know a good alternative instead of fitbit (i.e. Something more programmable and on your wrist), I'm happy to take suggestions.
qualitytime
There once was Pebble.

You could write dev apps in a straightforward easy to program no lock-in no review workflow.

And then guess who buys them out and flushes all that dev goodness in the toilet?

Yes, fitbit.

mafuyu
The Fitbit SDK is a direct continuation of a lot of the awesome work Pebble did, much of it by the same people. The Ionic may be aimed at a slightly different market, but we’re still working hard at trying to keep that dev goodness alive.
brlewis
There was once Pebble.

They went out of business and their assets went up for sale.

Then guess who buys some of their assets and keeps some of that dev goodness alive?

Yes, Fitbit.

endianswap
"Principal Software Engineer, Fitbit, Inc."

Common practice here is to disclose that when making comments...

brlewis
You can find many examples in my comment history where I mention that I work for but don't speak for Fitbit. I don't feel it's necessary to mention it for extremely basic fact correction as in this case. The details of what was and wasn't acquired are public and widely known.
c22
There still is pebble. I recently found my pebble time at the back of a desk after not using it for over a year. I was sure it'd be a crippled mess without cloud services and I'd have to jump through hoops to make it do anything useful. I was pleasantly surprised to find that the community is still strong and the watch works even better now without any cloud requirements. Features like voice to text which I recall being clunky and error prone work like a charm. I was worried I'd have to write my own watchface but there are literally hundreds available to choose from. The benefit of fostering an open ecosystem from day one is paying off even a year after the company's "demise." I suggest picking one up on eBay.
justapassenger
Garmin. https://developer.garmin.com/connect-iq/
sunpazed
I have experince coding on all three platforms (Pebble, FitBit Ionic, and Garmin). If you’re serious about developing fitness apps, then Garmin is a great option. The language is easy to pick up, and the SDK and ecosystem make it simple to access, stream, and record sensor data.
guzik
@mettamage, maybe Aidlab will fit in your needs (https://www.aidlab.com -> check Aidlab for Developers part) - it's an open health tracker (open to communicate with and create apps full of body information for anything that supports Bluetooth 4). SDK supports Python, Unity, iOS and Android bindings.
mafuyu
The Fitbit Ionic has a pretty open JavaScript SDK that we’re still working hard on to improve. You have access to a lot of the device public API, and can share your apps via links without getting it approved for the gallery.

https://dev.fitbit.com/

rhcom2
Awesome. All I want is a hackable Fitbit HR.
jimrandomh
Fitbit's software makes it very hard to get logs of heart-rate and step count data at smaller than a full-day granularity. I think this is because they know that if people looked at that data, they'd realize it was horribly inaccurate and complain. That's certainly been my experience when I've tried to spot check data from my Fitbit Blaze.
noarchy
I think there's probably something to this. Plenty of people complain about the HRM, myself among them. Weird things like spikes of 170+ bpm while doing nothing but walking, while at the same time recording 100 bpm while doing sprints? Pretty normal on the Fitbit, in my experience.
phillc73
The step counts are completely inaccurate. I have the flu and haven't left the house all day. My Charge 2 HR tells me I've done 4,044 steps. Not likely.

What I've always wondered is if it is consistently inaccurate. I really don't care if it thinks I've done 4,044 steps today, when maybe I've done 200 if I'm lucky. However, when I do go and do 4,000 steps, does the cumulative total then show 8,044, or some other figure?

HN Theater is an independent project and is not operated by Y Combinator or any of the video hosting platforms linked to on this site.
~ yaj@
;laksdfhjdhksalkfj more things
yahnd.com ~ Privacy Policy ~
Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.