Hacker News Reader

Yikes, does the hub have some kind of unauthenticated http server exposed to the LAN? Yet another reason I run open source software rather than buying the proprietary hubs.

View on HN

You have to tap the button on the hub and then you have 30 seconds to send a specific package to create a user. So yeah, not super, but also not totally u authenticated

I kind of remember just connecting to the MAC of the lightbulb itself by finding it on my routers table and then plugging in the info to his script. You could change colors too by passing little JSON strings. Maybe things are different now as this was in maybe 2018ish

It probably would've been using the bridge's HTTP API. You likely authenticated by pushing the button on the bridge.

The lightbulbs themselves only have a Zigbee radio (and Bluetooth, but not in 2018). They communicate with the LAN via the wired bridge.

https://developers.meethue.com/develop/get-started-2/#

Reply on news.ycombinator.com