The popular intelligent bed seller had an AWS vulnerability that could allow hackers to execute an arbitrary code

High -Tehnology Sleep Bridges allow Elon Musk’s and Doge’s staff to rest at work
But a researcher found security defects including key AWS and remote access
Hackers could exploit beds to infiltrate homemade networks and connected devices

Whatever you think about Elon Musk and his role, heading on Dog (Department of Government Expenditure), is certainly not lost. Conformable WiredIt seems that the divisive billionaire has worked for hours (as well as his personnel who seem to be put in 120 weeks) and is so employed in the case of cost reduction, he slept in the Doge headquarters at the Eisenhower Executive Office building, right on the road from the White House.

To help everyone with inevitable fatigue, Musk has accepted an eight sleep -pods. These intelligent beds offer sleep, reading and personalized positioning, snoring and come with a hub to keep the bedroom cold or comfortable, depending on their preferences. It seems that these beds have been provided fire, but they are not cheap if you want to buy them – the top of the Cali King Pod 4 Ultra range costs $ 5,000 and requires a monthly $ 17 or $ 25 – is not a problem if you are a billionaire, of course.

For such a big expense, you expect the beds to be safe to sleep, but now, a top security researcher claimed that the pods have a worrying defect.

An active AWS key

Dylan Ayrey from Security truffles He discovered a major vulnerability in his intelligent bed, exposing critical security defects in the internet connected mattress of Eight Sleep. The researcher says he has found an active AWS key in the bedmate of the bed, which seemed to slip directly to Amazon.

Digging deeper, he also discovered a distance backdoor who says he offers eight SSH access engineers to each client’s bed, allowing him to run the arbitrary code without supervision. He says employees could theoretically follow sleep models, detect occupancy or even control remote bed functions.

Beyond personal confidentiality, security implications extend to whole networks. With the access of SSH without restrictions, hackers or people from the interior intentional could pivot through the bed to infiltrate smart refrigerators, laptops or other connected devices. Ayrey has compared the level of access to the controversial “God mode” of Uber, an instrument that the traveling company has been used wrong to monitor users without consent.

The AWS key has been revoked shortly after Ayrey reported it so that its exact purpose is not known. “We can say from the surrounding context that the key had access to writing to Kenises, but beyond that, it is not clear,” says Ayrey. “However, what we know, is that an attacker could have used this key to send 5,000” Put “seconds in Kineza and has accumulated an invoice of $ 100,000 for eight sleep.”

Dissatisfied with what he found, Ayrey came with his own, safer, alternatively to the intelligent bed using an aquarium cooler, which he said offers the same temperature control with “none of the applications, subscriptions, Internet connectivity and security debts.”