Princeton IoT Inspector: discovers IoT devices and analyzes network traffic
iot-inspector.princeton.edu
iot-inspector.princeton.edu
This is a _great_ idea. Not sure the implementation is perfect, but giving consumers more control/visibility over their devices is going to be increasingly important.
I hope we get more companies into this space, but I don't think it's well understood enough to be a viable business. Until then, open source tools like this are going to be great.
If the authors are watching this thread, reach out, I'd love to connect you with some of my customers.
Security: All data collected from your IoT devices is stored on a secure server at the Department of Computer Science in Princeton University. IoT Inspector transmits data to our server over a secure channel, i.e., HTTPS.
... Otherwise we're going to need an IoT Inspector Inspector.
This looks like their main.
> Moved netdisco exe and pid file to inspector's local directory
Does seem a little strange to bundle that
def enable_ip_forwarding():
os_platform = utils.get_os()
if os_platform == 'mac':
cmd = ['/usr/sbin/sysctl', '-w', 'net.inet.ip.forwarding=1']
elif os_platform == 'linux':
cmd = ['sysctl', '-w', 'net.ipv4.ip_forward=1']
assert subprocess.call(cmd) == 0The target audience is likely "privacy-minded technically capable home network owners", a significant proportion of whom likely skew towards Apple products.
why would you use apple if you're technically capable? locked down linux would be waaaay more secure(and give you waaaaay cheaper options)
Uploads all data to Princeton’s servers.
I've read the "FAQ Why must IoT Inspector upload the data to Princeton?" and do understand the reasons for data collection, maybe once it reaches a data saturation point this new option could be introduced (I believe there is a “Start/Pause Inspection” button but that seems to only temporarily pause collection).
Naturally, there's going to be some reluctance in using and deploying a tool that uploads data to an outside party.