this post was submitted on 03 Dec 2025
1 points (100.0% liked)

Pulse of Truth

2460 readers
1 users here now

Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).

This community is automagically fed by an instance of Dittybopper.

Commenting rules:

founded 2 years ago
MODERATORS
 

Kohler, the makers of a smart toilet camera, can access customers' data stored on its servers, and can use customers’ bowl pictures to train AI.

top 50 comments
sorted by: hot top controversial new old
[–] Hackworth@piefed.ca 0 points 7 months ago (1 children)
[–] Tollana1234567@lemmy.today 0 points 7 months ago

a subsidiary of excrement LLc.

[–] M1ch431@slrpnk.net 0 points 7 months ago
[–] alekwithak@lemmy.world 0 points 7 months ago

TFW you spend $600 a month on a subscription iot toilet camera just to find out it's been taking pictures from inside your toilet and sending them over the internet!

[–] KickMeElmo@sopuli.xyz 0 points 7 months ago (1 children)

To be fair, that still may be end to end encrypted, just not the ends you were hoping for.

[–] awesomesauce309@midwest.social 0 points 7 months ago (1 children)
[–] ApeNo1@lemmy.world 0 points 7 months ago

Requiem for a video stream

[–] Werbert@lemmy.world 0 points 7 months ago (1 children)
[–] MotoAsh@piefed.social 0 points 7 months ago (1 children)

Something that starts as shit is distinctly not enshittified. It's just shit. Don't muddy the term.

[–] Tollana1234567@lemmy.today 0 points 7 months ago

shittification.

[–] Mongostein@lemmy.ca 0 points 7 months ago (3 children)

Why do people want a toilet cam in the first place?

[–] Imgonnatrythis@sh.itjust.works 0 points 7 months ago (2 children)

Is this a low-key kink shame or genuine ignorance?

[–] Mongostein@lemmy.ca 0 points 7 months ago

You’re saying it’s a kink thing?

[–] can@sh.itjust.works 0 points 7 months ago
[–] WhyIHateTheInternet@lemmy.world 0 points 7 months ago (1 children)
[–] higgsboson@piefed.social 0 points 7 months ago (1 children)
[–] WhyIHateTheInternet@lemmy.world 0 points 7 months ago

Sometimes I do, but nothing crazy, just a pinky or whatever.

[–] jaycifer@lemmy.world 0 points 7 months ago (1 children)

Urine and stool samples can indicate a person’s health and evaluate some conditions, such as over/underhydration or a lack of fiber. If there’s blood in the urine, a picture could allow a doctor to evaluate whether it’s a UTI or a kidney stone.

I’d even say it’s a scenario where machine learning could be used to train a computer to recognize many of those scenarios and offer suggestions to improve one’s health.

Is that worth $600 and a subscription fee when you could learn to recognize those things yourself and take a picture for your doctor if it’s needed? Maybe if you’ve got money to burn.

[–] SaveTheTuaHawk@lemmy.ca 0 points 7 months ago

It you have that much blood in urine or feces, you are in bad shape.

I just post my turds on insta for free assessment by close friends.

[–] blitzen@lemmy.ca 0 points 7 months ago (1 children)

I don’t know what is more stupid, that this exists or that it’s $600 plus $7/month.

[–] MotoAsh@piefed.social 0 points 7 months ago
[–] ThePantser@sh.itjust.works 0 points 7 months ago

Wait... this is a thing? I never thought someone would actually make this when it's been the butt of many gags in the media.

[–] commie@lemmy.dbzer0.com 0 points 7 months ago* (last edited 7 months ago) (2 children)

https is end to end

surely, once I read this article, I'll find they implemented ssl

edit:

as I suspected, Kohler is one of the ends of the e2ee. and it is implemented. what is the news here exactly

[–] Nikokin@lemmy.world 0 points 7 months ago (1 children)

Https is the transit. End to end encrypted means it's encrypted before, during, and after transit. Ie the data at rest would/should be encrypted

[–] commie@lemmy.dbzer0.com 0 points 7 months ago (1 children)

and Kohler said they are encrypting the data at rest

[–] Asetru@feddit.org 0 points 7 months ago (1 children)

They also said they decrypt after transit before they encrypt at rest, so it's not encrypted in between and they can look at your data. So it's not e2e if you want both ends to be you.

[–] commie@lemmy.dbzer0.com 0 points 7 months ago (1 children)

I think what your talking about is zero knowledge. but that's not what was promised.

[–] Asetru@feddit.org 0 points 7 months ago

Absolutely not. E2EE means it's encrypted from end to end. If I send data and I'm also the person to receive it on my app to inspect it, I'm both ends and the data should not be decryptable in between by anybody else if it's advertised as e2ee. Zero knowledge on the other hand doesn't mean that you transfer information securely but that you can prove that you have some information without it ever even being sent.

[–] theunknownmuncher@lemmy.world 0 points 7 months ago (1 children)

That's not what end to end encryption means. All encrypted transmissions are not end to end encrypted.

[–] commie@lemmy.dbzer0.com 0 points 7 months ago (1 children)

if Kohler is the other end of your transmission, and the data is encrypted til they decrypt it, it's e2ee. if you disagree, try explaining why.

[–] theunknownmuncher@lemmy.world 0 points 7 months ago* (last edited 7 months ago) (1 children)

Because that's plainly not what end to end encrypted means. That's just HTTPS.

if Kohler is the other end of your transmission

They're providing the service. End to end encryption maintains an encrypted communication channel between two clients that the service provider cannot decrypt.

By your definition, all HTTPS traffic would be end to end encrypted.

The term "end to end encryption" is just not applicable to this context and using it as marketting to users in order to give them a false sense of security is disingenous.

[–] pivot_root@lemmy.world 0 points 7 months ago* (last edited 7 months ago) (1 children)

From the perspective of the Kohler toilet camera being the sender and the Kohler shit-reviewing service being the recipient, TLS can technically be end-to-end encryption. As long as the shit-reviewing server is doing the TLS termination itself—and not Cloudflare or a reverse proxy—that meets the definition insofar as only the two communicating parties having the ability to see the cleartext. That's assuming the server has disk encryption and no employee has access to it while the disk is unlocked.

Kohler calling it E2EE is still disingenuous as fuck regardless of my above hypothetical, however.

[–] theunknownmuncher@lemmy.world 0 points 7 months ago

Again, nope. Not what end to end encryption means. That's just HTTPS.

[–] nonentity@sh.itjust.works 0 points 7 months ago (2 children)
[–] dan69@lemmy.world 0 points 7 months ago

Shut up and take my upvote..

[–] prettybunnys@piefed.social 0 points 7 months ago

I like how they refer to BO as a administration tool when really it was an exploit tool that had the side effect of some nifty administration ability,

It was significantly more reliable than sub7, which usually was itself infected.

[–] Gork@sopuli.xyz 0 points 7 months ago

When the Man-in-the-middle hacks into it, he may not like what he sees.

[–] billwashere@lemmy.world 0 points 7 months ago (1 children)

toilet. camera.

ummm… no thanks

load more comments (1 replies)
[–] LesserAbe@lemmy.world 0 points 7 months ago (2 children)

What could they possibly tell me about my health by visually inspecting my shit? I see the website mentions detecting blood, but pretty sure I can do that too...

[–] ozymandias@lemmy.dbzer0.com 0 points 7 months ago (1 children)

it can read your future… it’s kinda like tea leaves, but shittier

[–] SaveTheTuaHawk@lemmy.ca 0 points 7 months ago

I read pool leaves. I stand on your roof and tell you your future.

[–] Dasus@lemmy.world 0 points 7 months ago* (last edited 7 months ago) (2 children)

The colour can say a lot of different things than just showing blood in your stool.

Also, if you have red blood in your toilet after shitting, it's probably a popped hemorrhoid, but if your shit is black and tarry, that's digested blood, could be from an upper GI-bleed.

If your shit is orange/yellowish and floaty, youre clearly not absorbing fat correctly for some reason.

There's all sorts of things you can tell from shit. I've actually logged hundreds of photos of shit to an e-mail address (because I want to store them but not in my phone's gallery).

I'm waiting on going to a good gastroenterologist hopefully.

But idk if I'd trust an ai analysing them, but proper doctors should be able to.

Edit here https://gutscharity.org.uk/advice-and-information/poo-torial/

[–] LesserAbe@lemmy.world 0 points 7 months ago (2 children)

Would you consider spending $600 plus $7/month for this? (Assuming it was actually secure not like this one)

load more comments (2 replies)
[–] NotMyOldRedditName@lemmy.world 0 points 7 months ago* (last edited 7 months ago)

The size, shape, consistency, color are all telling of something going on.

Tie that in with tracking changes in diet and can learn a lot.

Tracking what you eat in detail is still a bitch though.

[–] x00z@lemmy.world 0 points 7 months ago (2 children)

What we're looking for is "zero-knowledge storage". If it's anything else we can just ignore the whole "encryption" marketing. That's because claiming "end-to-end encryption" is still semantically valid if it's transit only and they are the other end.

[–] NotMyOldRedditName@lemmy.world 0 points 7 months ago (2 children)

Doesn't end to end also mean at rest?

But at rest still doesn't matter as they'll own the key unless it's zero knowledge like you said.

[–] Quill7513@slrpnk.net 0 points 7 months ago

it does not. end to end encryption and point to point encryption are two ways of delivering an encrypted message to a destination. a point to point encrypted message has a message and header that are decrypted by every node in the network to determine where to route it next. an end to end encrypted message has its header and body encrypted separately such that only the sender and recipient see the body, but the nodes can read the header for routing. encrytion at rest just means that the message, once saved to disk, is encrypted

[–] x00z@lemmy.world 0 points 7 months ago

End-to-end means a path from point A to point B.

End-to-end encryption could definitely include at rest encryption, but only as part of the path that isn't one of the ends. An example would be where a service like WhatsApp stores your message until it can be delivered to the other contact. End-to-end includes "zero knowledge storage" in this example because WhatsApp can not view your message. You are one end and your contact is the other end. The data is stored encrypted at rest (going trough their servers) because their server is neither end. This is literally why end-to-end encryption exists.

In the case of the smart toilet storage, you are not both ends. Instead you are one end and the storage provider is the other end. The transit is still end-to-end encrypted but it does not imply "zero knowledge storage". They use the term end-to-end encryption because they transfer the data to their servers without people being able to intercept it. And that's semantically correct.

[–] hunnybubny@discuss.tchncs.de 0 points 7 months ago

What if it was AI to AI encrypted, huh?

[–] Saapas@piefed.zip 0 points 7 months ago (1 children)
load more comments (1 replies)
load more comments
view more: next ›