$5 Amazon Dash Buttons Can Be Hacked as WiFi Logging Buttons

Amazon launched Dash buttons earlier this year in order to allow Amazon Prime customers to order products by simply pressing them. The small WiFi enabled buttons only cost $5, and looked like a nice thing to hack. And that’s exactly what Ted Benson did, and managed to use them to log his baby’s patterns like the number of time he poos, or wakes up at night by pressing some buttons, and storing the results in a spreadsheet.

Dash_buttonThe hack does not involve any firmware or hardware modifications, and instead he noticed that the Dash was disconnected and sleeping, except when the button was pressed. So all he does is to detect ARP requests from the Dash using some Python code relying on Scapy library, and when the MAC address matches one of the dash MAC addresses (hard coded in the Python program), data is sent to a Google Spreadsheet using a tools called Magic-Form. Here’s a quick demo.

Just one last detail… You’ll have to make sure you don’t complete the last step of the setup instructions from by Amazon, that is setting the product to order, unless you plan on ordering the product each time your press the button to record your baby’s cries, or other activity.

Via Hackernews and Liliputing

Support CNX Software - Donate via PayPal or become a Patron on Patreon

Leave a Reply

1 Comment threads
0 Thread replies
Most reacted comment
Hottest comment thread
1 Comment authors
Sander Recent comment authors
newest oldest most voted
Notify of

arp-scan has been my friend for a long time on my home LAN, for example to detect if a phone is online, or a PS3 station. I’ve fed that into MRTG, and, voila, I had an overview when the phone owner was at home.