Hacking my “smart” toothbrush
Great article, the most interesting part of which is that you can lock your self out of your toothbrush head after three wrong password attempts. I didn't dig into the data sheet for the NFC chip very deeply, but I imagine that it's just the default that the chip ships with. Or maybe Philips <i>really</i> wants that $25 for a new toothbrush head. :-)<p>EDIT: nope, <i>not</i> the default. From the data sheet, last sentence:<p><i>"To prevent brute-force attacks on the password, the maximum allowed number of negative password verification attempts can be set using AUTHLIM. This mechanism is disabled by setting AUTHLIM to a value of 000b, which is also the initial state of NTAG21x.</i>"<p>So Philips went out of their way to secure that toothbrush head. That's reassuring.