this post was submitted on 03 Dec 2025
146 points (100.0% liked)

Pulse of Truth

1753 readers
261 users here now

Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).

This community is automagically fed by an instance of Dittybopper.

founded 2 years ago
MODERATORS
 

Kohler, the makers of a smart toilet camera, can access customers' data stored on its servers, and can use customers’ bowl pictures to train AI.

top 35 comments
sorted by: hot top controversial new old
[–] LesserAbe@lemmy.world 3 points 4 hours ago

What could they possibly tell me about my health by visually inspecting my shit? I see the website mentions detecting blood, but pretty sure I can do that too...

[–] billwashere@lemmy.world 10 points 7 hours ago (1 children)

toilet. camera.

ummm… no thanks

[–] xvertigox@lemmy.world 3 points 6 hours ago

Don't forget there's a monthly sub too! You can pay every month to have an AI train on your shit.

[–] KickMeElmo@sopuli.xyz 44 points 10 hours ago (1 children)

To be fair, that still may be end to end encrypted, just not the ends you were hoping for.

[–] awesomesauce309@midwest.social 15 points 9 hours ago (1 children)
[–] ApeNo1@lemmy.world 3 points 7 hours ago

Requiem for a video stream

[–] Werbert@lemmy.world 32 points 9 hours ago (1 children)
[–] MotoAsh@piefed.social 6 points 9 hours ago (1 children)

Something that starts as shit is distinctly not enshittified. It's just shit. Don't muddy the term.

[–] Tollana1234567@lemmy.today 1 points 2 hours ago

shittification.

[–] Hackworth@piefed.ca 33 points 10 hours ago (1 children)
[–] Tollana1234567@lemmy.today 1 points 2 hours ago

a subsidiary of excrement LLc.

[–] blitzen@lemmy.ca 20 points 10 hours ago (1 children)

I don’t know what is more stupid, that this exists or that it’s $600 plus $7/month.

[–] nonentity@sh.itjust.works 12 points 9 hours ago (2 children)
[–] prettybunnys@piefed.social 1 points 6 hours ago

I like how they refer to BO as a administration tool when really it was an exploit tool that had the side effect of some nifty administration ability,

It was significantly more reliable than sub7, which usually was itself infected.

[–] dan69@lemmy.world 2 points 7 hours ago

Shut up and take my upvote..

[–] alekwithak@lemmy.world 14 points 10 hours ago

TFW you spend $600 a month on a subscription iot toilet camera just to find out it's been taking pictures from inside your toilet and sending them over the internet!

[–] Mongostein@lemmy.ca 8 points 10 hours ago (2 children)

Why do people want a toilet cam in the first place?

[–] WhyIHateTheInternet@lemmy.world 3 points 8 hours ago (1 children)
[–] higgsboson@piefed.social 1 points 6 hours ago

Like....butt stuff?

[–] Imgonnatrythis@sh.itjust.works 0 points 8 hours ago (2 children)

Is this a low-key kink shame or genuine ignorance?

[–] Mongostein@lemmy.ca 5 points 7 hours ago

You’re saying it’s a kink thing?

[–] can@sh.itjust.works 0 points 7 hours ago
[–] M1ch431@slrpnk.net 6 points 10 hours ago
[–] commie@lemmy.dbzer0.com 5 points 9 hours ago* (last edited 9 hours ago) (2 children)

https is end to end

surely, once I read this article, I'll find they implemented ssl

edit:

as I suspected, Kohler is one of the ends of the e2ee. and it is implemented. what is the news here exactly

[–] Nikokin@lemmy.world 3 points 7 hours ago (1 children)

Https is the transit. End to end encrypted means it's encrypted before, during, and after transit. Ie the data at rest would/should be encrypted

[–] commie@lemmy.dbzer0.com 0 points 6 hours ago (1 children)

and Kohler said they are encrypting the data at rest

[–] Asetru@feddit.org 1 points 3 hours ago

They also said they decrypt after transit before they encrypt at rest, so it's not encrypted in between and they can look at your data. So it's not e2e if you want both ends to be you.

[–] theunknownmuncher@lemmy.world 2 points 7 hours ago (1 children)

That's not what end to end encryption means. All encrypted transmissions are not end to end encrypted.

[–] commie@lemmy.dbzer0.com 0 points 6 hours ago (1 children)

if Kohler is the other end of your transmission, and the data is encrypted til they decrypt it, it's e2ee. if you disagree, try explaining why.

[–] theunknownmuncher@lemmy.world 4 points 6 hours ago* (last edited 6 hours ago) (1 children)

Because that's plainly not what end to end encrypted means. That's just HTTPS.

if Kohler is the other end of your transmission

They're providing the service. End to end encryption maintains an encrypted communication channel between two clients that the service provider cannot decrypt.

By your definition, all HTTPS traffic would be end to end encrypted.

The term "end to end encryption" is just not applicable to this context and using it as marketting to users in order to give them a false sense of security is disingenous.

[–] pivot_root@lemmy.world -1 points 6 hours ago* (last edited 6 hours ago) (1 children)

From the perspective of the Kohler toilet camera being the sender and the Kohler shit-reviewing service being the recipient, TLS can technically be end-to-end encryption. As long as the shit-reviewing server is doing the TLS termination itself—and not Cloudflare or a reverse proxy—that meets the definition insofar as only the two communicating parties having the ability to see the cleartext. That's assuming the server has disk encryption and no employee has access to it while the disk is unlocked.

Kohler calling it E2EE is still disingenuous as fuck regardless of my above hypothetical, however.

[–] theunknownmuncher@lemmy.world 2 points 5 hours ago

Again, nope. Not what end to end encryption means. That's just HTTPS.

[–] ThePantser@sh.itjust.works 4 points 9 hours ago

Wait... this is a thing? I never thought someone would actually make this when it's been the butt of many gags in the media.

[–] Gork@sopuli.xyz 2 points 9 hours ago

When the Man-in-the-middle hacks into it, he may not like what he sees.