7 o'clock in the morning. The perfect time to start up the machines and get to work - or something like this. At least her rather fucked up real world schedule made it harder to track her on a world map. On the other hand her real world attacks did not, so... whatever. Attacks. The zero days still laid as an explanation in front of her. She had agreed to leave the insulin pump - bricking hers would either way be a pity - and take up the CareWatch. So first a little searching. On the normal web and Shodan and what else came to her mind. The results were interesting, but not amazing. It really was a [b][color=be0b0f]0[/color][/b]-day. There was next to nothing about this watches - because they were still brand new. A small startup from the Netherlands. A successfull startup, having already created cooperation with two whole regions and the insurances in both for a bigger roll-out and selling individual devices outside of those zones. The watch itself was actually interesting enough. A nice, modern website with some beautiful pictures and simple graphics. [i][color=7ea7d8]We care for you.[/color][/i] A nice message to take home. In the end albeit the exploit apparently aimed at the watches, Care Watch was designed as part of a whole network, connecting the watches and aditional sensors to cloud based services for monitoring and alerts to a central where professional aid workers were constanly available for live speech connection or further actions. Her senses tingled. This sounded like an invitation for privacy violations - even if the whole thing was secure and apparently it was not. She scrolled around a little more, apparently the thing connected to firealarms and other interesting devices. Nice idea, but what she was more interested in was the question what the watch itself recorded. [i]Click.[/i] The side took a moment to load, but she had found the watches features: [b][color=00aeef]Alarm button[/color][/b] blah blah .. [b][color=00aeef]Temperature and heart beat measurement[/color][/b] More interesting and not bad. [b][color=00aeef]Zero gravity/drop down detection[/color][/b] She grinned. It was a nice way to determine a fall. [b][color=00aeef]Irregular movement patterns[/color][/b] Her eyebrow arched. She read and found it was to find signs of a stroke or similar happening, but the amount of data needed for this made it very interesting. [b][color=00aeef]Location tracking[/color][/b] Again understandable, but she slowly worried about some of the data. [b][color=00aeef]Live speech connection[/color][/b] Sweet! That meant the thing had a microphone. That made the hijacking possibility even more interesting. She read on a little about the possibility to to program individual reminders for medicines, birthdays and so on. Also not bad... What caught her a little off-guard was the fact that there was not too much written about security. Something about privacy and using private networks at home, which she even believed to be secure, and mobile telephone connections outside. A little read on also detailed how the watch could also be used by children and people often working alone. That was it. For a while she just sat in her chair, thinking. This was a real 0-day, the watch was not even widely deployed yet. Most likely whatever she did would not get into the big news. And apart from some security concerns the idea was really nice. The question was what would she do with it? she starred at the Discord chat for a while again. She did not trust that any of these people had enough brain to be trusted with medical information (but to be fair - she did not trust mostly anyone with that). And it would not even be too useful for them... she sighed "Apparently I am going to do some people a favor..." She stood up again and grabbed her things. The Netherlands were not out of reach, but the test village/city she wanted to go to was still a few hours drive away. But hey! Fries for lunch! When she parked her car lunch time had swung by (well, for her. the clock said it was 11:30 AM). She trolled through the pitoresque small streets and grabbed fries at a small stand. She then proceeded into the direction of the retirement home she had found to be a cooperation point. It looked nice. And had a little park outside. She unpacked her equipment and started getting to work, at first just scanning her environment. After a while she could make out the watches and followed the probing procedure laid out. It... worked. Surprisingly well even. The shell on port 1 blinked slowly. [color=a187be][i]> _[/i][/color] She started to look around a little. Linux system, albeit adapted. [color=a187be][i]drwxr--r-- 1 usr home 4096 logs -rw-r--r-- 1 usr home 30405 birthday -rw-r--r-- 1 usr home 30405 alerts[/i][/color] Logs. Logs on that device were surely interesting! [color=a187be][i]> cd logs > ls[/i][/color] A list of names washed over the screen. She could literally have a look into any log of motion and so on. Not good! The only pertially good thing was, that she could not easily send it out without leaving traces. She could just write herself into the receivers list, though. She decided against it. She liked the project - so she started with a small one. Just altering an alert on any watch she could scan. And it were... enough to surely create some irritation for the day they would all just chime up. [i][color=fdc68a]Je verpfleegster is op haar verjaardag. Je zou haar appeltaart moeten brengen![/color][/i] After she had inserted the alert into a good amount of watches she just picked up and stretched. Before returning home she grabbed some sweets from the supermarket and a koffie verkeerd. The message in the Discord was rather short [i]Port probing worked[/i]. The rest was either way most likely not too interesting for them, as long as they were not in the region. She turned to her computer and flicked it on, navigating to a news site for technology enthusiast. She nearly fell back laughing when she read the news. Every patients heart just stopped. Out of an "error". She giggled. There were a few details about the chaos this had lead to, about doctors calling up on multiple patients before understanding what went wrong. Her site circled about how the hacker could have gotten in and apparent security failures. Listed a few other occasions were e.g. high-ranking persons deactivated communication out of fear. Well... all wonderful. She sighed, shook her head and turned to something else. Today was not so bad of a day.