That LIFX Smart Lightbulb Hack Wasn’t Easy

Context Information Security analyzed LIFX smart bulbs and found that most intra-bulb mesh communications were sent in the clear while sensitive credential exchanges remained encrypted; by physically extracting firmware (using JTAG), reverse engineering the ARM Cortex‑M3 based SOCs and crypto routines, researchers recovered keys/IVs and demonstrated packet injection to obtain and decrypt Wi‑Fi credentials, showing attackers could control bulbs and expose network configurations though the attack required significant hardware and reverse‑engineering effort.