Snooping Flume Water Monitor Data On The Wire

A hardware hacker reverse-engineered the encryption used by a Flume water monitor to intercept and decrypt its network traffic. By corrupting the public key stored in the bridge device's flash, the device was forced into a fallback that revealed it relies on a static device secret key rather than session keys via LibHydrogen. This allowed building a man-in-the-middle relay tool that forwards traffic to Flume's servers while decrypting and locally logging water usage data. The tool is published on GitHub, though the setup may block future firmware updates.

Source: https://hackaday.com/2026/08/14/snooping-flume-water-monitor-data-on-the-wire. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.