Hacker News Reader

My understanding[1] was that these types of devices sync by sending a blob over bluetooth to the paired cell phone, and then the cell phone uploads this to the cloud to be decrypted. What kinds of devices are you talking about?

[1]: https://hackaday.com/2017/12/29/34c3-fitbit-sniffing-and-fir...

View on HN

FIT files aren't encrypted. You can copy them directly to your computer are parse them easily.

Last time I checked they hid the format description behind an NDA ... aside from that no issue indeed.

I never understood how that works. All it takes is one person to post it publicly and then everyone has it.

Maybe they are rot13 encrypted.

Quadruple rot13 for enhanced security.

It works by having lawyers :)

And we'll, there seem to be ready to use libraries, you can use without signing the NDA: https://github.com/search?q=fit+garmin&type=

Reply on news.ycombinator.com