The scanning is malicious.

The frequency etc. leading to 1TB is probably ignorance, but that doesn't matter as it is consequence of malicious scanning either way.

▲

MBCook a day ago | parent | next [-]

Exactly. The whole thing is weird and creepy and wrong.

I understand why a TV would keep track of what I’m watching so they can sell the data. I think it should be illegal. It’s horrible. My TV isn’t connected. But the reason they would do it fits in my brain. I can see how they got there.

How a coffee machine got to running network probes… nothing. It seems like some sort of Internet of Things DEFCON presentation topic made up by putting random words together.

So to think that on top of that they were purposefully causing so much traffic on the local network is just a few steps too far for me to think that part was intentional.

	▲	johannes1234321 9 hours ago \| parent \| next [-]
		The reason is that probably the coffee machine vendor doesn't know what is going on. They probably got that module from.some third party, like "hey, you want to cheapen your smart coffee machine? - take out network stack!" and then they don't have to hire developers doing all the work to implement a network configuration system and all that stuff, but have a simple API for the App telling you coffee is ready
	▲	mcv 12 hours ago \| parent \| prev \| next [-]
		I think the reason to use a coffee machine is because it's an innocent device that doesn't require any data whatsoever, so nobody would ever suspect it of something so nefarious. They're explicitly taking advantage of their customers' trust, and deserve to go bankrupt.
	▲	fragmede a day ago \| parent \| prev [-]
		The reason is the same though. Probe the shit out of your network and gather data so they can sell it.

▲

mrweasel 18 hours ago | parent | prev [-]

The funny part is that the manufactures shitty QA made this a much bigger thing that it could have been. Had the machine done a scan once every week, which is more than enough for their purpose, diffed the result locally and pushed the few kB of data to the internet, then no one would have noticed anything.

Yes, it's malicious and completely unnecessary, but incompetence has potentially made it a PR problem.