$5 Amazon Dash Buttons Can Be Hacked as WiFi Logging Buttons

Amazon launched Dash buttons earlier this year in order to allow Amazon Prime customers to order products by simply pressing them. The small WiFi enabled buttons only cost $5, and looked like a nice thing to hack. And that’s exactly what Ted Benson did, and managed to use them to log his baby’s patterns like the number of time he poos, or wakes up at night by pressing some buttons, and storing the results in a spreadsheet.

Dash_buttonThe hack does not involve any firmware or hardware modifications, and instead he noticed that the Dash was disconnected and sleeping, except when the button was pressed. So all he does is to detect ARP requests from the Dash using some Python code relying on Scapy library, and when the MAC address matches one of the dash MAC addresses (hard coded in the Python program), data is sent to a Google Spreadsheet using a tools called Magic-Form. Here’s a quick demo.

Just one last detail… You’ll have to make sure you don’t complete the last step of the setup instructions from by Amazon, that is setting the product to order, unless you plan on ordering the product each time your press the button to record your baby’s cries, or other activity.

Via Hackernews and Liliputing

Share this:

Support CNX Software! Donate via cryptocurrencies, become a Patron on Patreon, or purchase goods on Amazon or Aliexpress

ROCK 5 ITX RK3588 mini-ITX motherboard
Subscribe
Notify of
guest
The comment form collects your name, email and content to allow us keep track of the comments placed on the website. Please read and accept our website Terms and Privacy Policy to post a comment.
1 Comment
oldest
newest
Sander
Sander
9 years ago

arp-scan has been my friend for a long time on my home LAN, for example to detect if a phone is online, or a PS3 station. I’ve fed that into MRTG, and, voila, I had an overview when the phone owner was at home.

Boardcon Rockchip and Allwinner SoM and SBC products