he/him 
Tweeting because I’m too lazy to make a formal reportpic.twitter.com/fFh3EndsBu
Show this thread
Sniffing my network traffic to see what all the IoT devices are doing. Noticed that on the Lenovo Smart Display, which is running some Google Home Android IoT abomination, that it loads YouTube thumbnails over HTTP...
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Naive question, but what would be the preferred protocol?
- 3 more replies
New conversation -
-
-
What are you using for sniffing? Wireshark?
-
Ettercap for ARP poisoning and Wireshark for packet inspection
End of conversation
New conversation -
-
-
Can you explain why this is a bad thing?
-
It’s not using HTTPS and traffic can be easily intercepted or replaced. The specific case I found is for images, which reduces the harm a malicious actor could have to just replacing what they are.
End of conversation
New conversation -
-
-
Remember when Lenovo laptops shipped with multiple malware to intercept and decode traffic so it could scan product images with AI? Very possibly relatedhttps://www.makeuseof.com/tag/now-three-pre-installed-malwares-lenovo-laptops/ …
-
Not related at all. This is just some bad YouTube API that’s returning HTTP thumbnail URLs.
- 1 more reply
New conversation -
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.