How I Hacked Amazon’s $5 WiFi Button

https://medium.com/@edwardbenson/how-i-hacked-amazon-s-5-wifi-button-to-track-baby-data-794214b0bdd8

by _kcn8 • 11 years ago

298 118 11 years ago

JTon2• 11 years ago

Just follow this list of instructions, but don’t complete the final step — don’t select the particular product you want ordered.

Overall I think this is great. I can see this being useful for a variety of different tracking; not only for infants. I'd probably go a step further and using my router I'd block the Wifi Button from having access to the web. I can just imagine the feeling of having many unexpected packages showing up at my door.

haswell• 11 years ago

I could see this being a useful tool when trying to form good habits. Brush teeth? push the button. Get a fresh glass of water from the fridge? push the button.

When analyzing other aspects of my life such as spending, I have tools to show me what I've done in the past, and those tools can help me improve (e.g. spending reports). This is admittedly reactionary, but I find it useful nonetheless. Track enough other "stuff about stuff", and I think the data could become interesting over time, providing similar "hindsight" that in turn can be used to improve oneself.

Of course, this means it will be necessary to have button things all over the place...

willhinsa• 11 years ago

That's exactly what I plan on using mine for. It makes logging actions so much faster. I would love to just have a smartwatch with a set of about 12 or so buttons that correspond to a specific action, but that will take time to happen, if at all.

acutelyobtuse• 11 years ago

A Pebble with Tasker could get you there (HTTP POST) or one of the integrations. Even IFTTT or DO. You could probably also even go with the Magic Form app described in the OP's article.

Making it context aware is possible too (e.g. in the bathroom or at work) with some thinking of Wifi routers or if you wanted NFC tags, iBeacons.

sp3322• 11 years ago

If you don't mind pulling your phone out, IFTTT launched a new app called Do that just lets you push a button to "do" something on one of their channels. They have pre-made recipes for putting the current time into Google Spreadsheets etc. https://ifttt.com/recipes/227069-track-your-work-hours

I think IFTTT is working on a Pebble app as well, but it hasn't launched.

pstadler• 11 years ago

Check out Nuimo[1]. It's a small programmable device featuring a simple LED matrix style display while supporting multiple types of interactions. I could even see this in use at factories for ordering supplies for a specific machine or calling service technicians to it.

[1] http://senic.com

celim3073• 11 years ago

Are there any other cheap wifi buttons without the bootup delay? Looking for something to talk to my raspberry py to turn off/on lights or switch spotify songs, would be annoying to have to wait for it.

nicksergeant• 11 years ago

Just a note, Misfit Flash now allows you to program button presses (single or double) to IFTTT, and from there you can go anywhere: https://ifttt.com/misfit

It's also fairly cheap at $19 (though not as cheap as these Amazon buttons, of course).

Edit: Misfit Flash is an activity / fitness tracker: http://misfit.com/products/flash

wmeredith• 11 years ago

Screw pressing the buttons. Can I train an Amazon Echo to listen for me brushing my teeth?

Brian-Puccio• 11 years ago

Just put a webcam in your bathroom, you can track how long you brush, floss, even shower (save water if you're in CA!) with just one device.

No, seriously, the bathroom is the last place I want the quantified self.

nl• 11 years ago

I heard a VC complaining about a pitch he had for an internet connected toothbrush for kids once. It would notify parents if it wasn't used.

I thought it was quite a good idea!

genericuser• 11 years ago

Take your PRN medication, press button.

Nikker• 11 years ago

Keeping track and sticking buttons all over the place is going to be an "early adopter" feature. Once we get to an overwhelming number of "buttons" it will make sense just to put up a couple cameras similar to the Microsoft Kinect and use hot zone + gestures to do the same thing. RFID in boxed products might help out but the buttons will end up being a mess right quick.

lisivka• 11 years ago

It is cheaper to put microphone and ask for food, similar to regular shop: "Hey, Amazon", "Order, please", "Bottle of milk and bread", "Bottle of milk «Foo» $2,50. Bread «Bar» $1,75. Total: $4,25. Confirm?", "Yes", "Order accepted, wait for delivery.". Something like Siri, but activated by push of hardware button on the fridge.

holyoly• 11 years ago

Interestingly enough, when I signed up for Amazon Fresh, I got a version of the Dash that is multipurpose. Instead of having buttons everywhere, mine has a barcode scanner, and voice recognition. When I am out of eggs, I just pick it up, push the "Mic" button, say "Eggs," and it appears on my "Dash" list when I log in to Amazon Fresh.

tmarthal• 11 years ago

This is a different solution, and less manual - but OralB has a bluetooth enabled toothbrush that will auto-record your tooth brushing in their app (as well as metrics like 'time used too much pressure' and 'total brush time'). You need to manually record flossing and tongue brushing via the app though (using a button on your smartphone like others have described). It's not bad, it's not good, but it's a start.

kleer001• 11 years ago

I'm really surprised that there isn't already a ready solution for this. Maybe there is and it just got buried under bad marketing or something. Almost seems like a no brainer, but then again there's the whole "It seems obvious in retrospect thing." Maybe someone will jump in and outdo Amazon at this particular task. China?

zaroth• 11 years ago

The hack here is as much sniffing the GratARP as it is piggybacking on the subsidized hardware without buying the (high margin) goods which were meant to defray the cost of the device.

I shudder to think how this "ingenuity" could be prosecuted under CFAA...

fweespeech3• 11 years ago

Even if it was, simply hooking them up to a wifi network without an internet connection is functionally identical.

Given that isn't something you can be prosecuted for, I don't see why you could convince a jury this was.

mcphage• 11 years ago

Awesome—this is exactly the kind of thing I was hoping for when I saw this announced, and that's exactly why I bought one when I could.

chadlung• 11 years ago

This sounds like a potential Kickstarter project idea. A generic version, perhaps a pack of stickers to put on devices symbolizing misc. everyday things.

radnor• 11 years ago

The Flic button did just that, except it uses bluetooth instead of wireless. https://flic.io/

The extra usability and generic-ness means it'll cost you $35 vs $5 for a branded WiFi button.

pbreit• 11 years ago

How cheap could these get? Which would be cheaper, bluetooth or wifi?

Amazon obviously can subsidize via product sales.

StavrosK2• 11 years ago

It looks like that button isn't standalone, and needs a phone nearby to work. I just want something with that form factor that makes a POST request to a URL of my choice, that's it.

faleidel• 11 years ago

Like this? https://www.indiegogo.com/projects/flic-the-wireless-smart-b...

celim3073• 11 years ago

yeah idk what terms to search for when looking for a generic wifi button. searches just come up with premade solutions from belkin or whatever.

i just want a switch that can send a message to my raspberry pi without the bootup lag

jdiez17• 11 years ago

Hmm. It could be done with an ESP8266 and little more. I might put something together if I find the time.

xienze3• 11 years ago

Well there apparently is an "Amazon Elements" button that is pretty generic. Just slap a label on top of it.

lsaferite• 11 years ago

I can see vinyl sticker sites having a dash template very soon.

drtse4• 11 years ago

Something similar could be built easily using an ESP8266, but a single AA battery would not be enough. Looking at this guide[1] it looks like new sw can already be flashed on it, but other than using the uart or some gpio, i don't see attempts at using the wifi interface.

[1] https://learn.adafruit.com/dash-hacking-bare-metal-stm32-pro...

wyldfire• 11 years ago

Additional info beyond the adafruit article: https://github.com/dekuNukem/Amazon_Dash_Button

itbeho• 11 years ago

Lots of info here: http://www.esp8266.com

nnurt• 11 years ago

Amazon's WiFi Button is way way better than the ESP8266: it has 1MBit internal flash, 16MBit external flash, a powerful 120MHz microcontroller with tons of peripherals (2 DACs, 3 ADCs, etc), an internal MEMS microphone (!)

The microcontroller on Amazon's button also has a real 1500-page documentation in English, instead of 10-page badly translated Chinese datasheet.

akerl_2• 11 years ago

Anybody know if the MAC address in buttons of the same type is the same?

I know it'd be terrible network practice and terrible standards-wise and just generally terrible, just figured I'd double-check before buying a crate of Tide buttons and discovering they all report the same MAC

JTon2• 11 years ago

I'm not sure, but I doubt it. You could order two or three and check for yourself.

According to a stack exchange discussion [1] duplicate MAC addresses could result from spoofing, a mistake during manufacturing, or willful negligence on the part of the manufacturer. I'd expect Amazon to follow the standards.

[1] http://serverfault.com/questions/462178/duplicate-mac-addres...

bentcorner• 11 years ago

I don't know for certain but they should be all different. Amazon's goal is for consumers to have many of these things in their home, and they should all interoperate nicely. Then again, the usage model probably doesn't really need unique MAC addresses.

akerl_2• 11 years ago

I figured if they were trying to be (terribly) "clever", they might go with one-MAC-per-product. Thinking about it more, that should be impossible since, as per the article, a single button can be used for a selection of products in that category, so it'd be possible that 1 Tide button buys one Tide product, and another buys a different Tide product, based on my configuration.

My fear was that they'd pick 1 MAC and declare "this shall be the MAC of Tide buttons", increment that 1 for Bounty buttons, etc etc

mikeash• 11 years ago

I think the usage model does need unique MAC addresses. Maybe not for everybody, but for a decent portion of their customer base.

For example, there are apartment buildings that provide WiFi for their residents. If two residents buy the same button, chaos would ensue if the two buttons had the same MAC address. For the personal care stuff, merely having multiple people using multiple bathrooms who all want magic buttons to order more would do it.

It sounds like the button only connects to the network when it needs to (which makes sense to preserve power) so you could get away with it much of the time, but if two people hit their duplicate buttons simultaneously you'd have trouble.

monochromatic• 11 years ago

There's almost no way Amazon would be stupid enough to be shipping out tons of devices with the same MAC. Easy enough to order a couple and check though.

got2surf• 11 years ago

It looks like the demo video has at least two different buttons so it seems like they have different MAC addresses

anindyabd• 11 years ago

This is great. I'm getting one of these buttons now.

ck2• 11 years ago

I am really curious to eventually learn the mentality (and financial status) of people who use these buttons for real with Amazon.

jon-wood• 11 years ago

If I could get one in the UK for nappies or wet wipes I'd buy in a heartbeat, the major factors for it working there would be that I have no choice as to whether I buy more, and it never being a good time to stop and order more the usual way.

If I'm fishing nappies out of the box and notice we're running low I'm almost certainly mid change, or preparing to go out, and I'll probably forget when do I get the chance.

xienze3• 11 years ago

They really are a good idea IMO. The idea is you put the button next to the garbage bags, detergent, etc. Hey, the detergent just ran out, click, ordered and done. Very convenient and eliminates the problem of forgetting to add <whatever> to the shopping list.

sliverstorm2• 11 years ago

One might object that forgetting to add <whatever> to the list is really not a terribly large problem, and you would be right- but $5 is also not a terribly large sum.

jreed912• 11 years ago

I would like it if I could just change what I order. The options are pretty limited right now.

fweespeech3• 11 years ago

The hilariously sad part is there is no technical reason this feature isn't available. Just change the ASIN the button buys.

jreed912• 11 years ago

Ahh I was wondering if it had some specific API for only allowed purchases. But if that's the case I may buy one of these.

benkuykendall• 11 years ago

Wouldn't the button still call back to Amazon every time you click it? Even if it doesn't purchase anything, I don't need Amazon to know my assorted button-clicking habits.

joezydeco• 11 years ago

I would think Amazon could easily close the "button press orders zero items" loophole and then this project would have some things to fix.

0x0• 11 years ago

You could probably set up a mishmash of dnsmasq and iptables to route everything including dns lookups to a custom daemon on your local network to prevent leaking clicks to the internet.

eob• 11 years ago

Hi folks -- what a surprise to check HN and see my own article.

Here's a summary of the reports I've gotten since publishing it the other week:

1) It works. Most likely problem you'll have is installing the Python libraries I used.

2) Check the comments for a version someone posted that works on RasberryPI with no extra libraries.

3) I'd love to hear what you build. Coolest use case so far is a few folks using it as a remote light switch for connected light bulbs.

lordleft• 11 years ago

How does the baby like the button? (I love this article!)

vlunkr• 11 years ago

Well that's probably more useful than what Amazon intended it for.

Someone1234• 11 years ago

You say that but...

I have an elderly relative, she drinks Keurig K-Cups because with arthritis she struggles to brew coffee the other way(s). She isn't very tech' literate, and she has us order her more from Amazon every so often (since they're cheaper than retail stores).

I'd love to give her a Keurig button and say "push this and more coffee will arrive two days later." Literally I would have if they sold one (they don't).

nivla2• 11 years ago

Maybe I am overlooking something but why don't you subscribe her to Amazon's "Subscribe & Save" program? This way she will consistently get her deliveries and might even save 5% to 15%.

antman• 11 years ago

I use eps8266 for my IoT. Can't get any easier or cheaper than that. http://nodemcu.com/index_en.html

profinger• 11 years ago

That page is absurd. I'm on a pretty good internet connection and the image in the background, of sheep for some stupid reason, was loading slowly in chunks. I'm really starting to hate pages that think they need giant stupid high-res images in the background.

hamandcheese• 11 years ago

The IP its being served from (121.41.33.127) seems to be from China, which would explain the slowness.

blacksmith_tb• 11 years ago

Well, cheaper, no. But easier wouldn't be hard. I have two nodemcu-s, and getting the toolchain to work on OSX or Ubuntu has been a series of headaches - drivers are nontrivial, flashing updates is touchy, etc.

giech• 11 years ago

There is also this (unrelated) repository for doing more hardware-oriented hacks (i.e. programming the microcontroller): https://github.com/dekuNukem/Amazon_Dash_Button

Edit: Just saw that this was also posted in this comment's thread https://news.ycombinator.com/item?id=10075734

jwildeboer• 11 years ago

"Hack". Uhm. Nope.

theschwa• 11 years ago

I'm not sure what you mean by this comment. This is pretty much the definition of hacking something together.

d232• 11 years ago

In fact, this is my favorite meaning of the word hack. It's turned into essentially a synonym for "programmer" as far as I can tell, but I always liked this classic definition of getting a thing to something other than what it was intended to do.

jo9092• 11 years ago

This is really cool. I suspect the buttons are already sold at loss, so it is probably very hard to build a similar, but more open, device at around a price point where you could just plaster the whole house with such buttons.

But I wonder if it might be done when leaving out the WiFi and most of the processing power from the button, and having essentially what is a RF remote control (like used for remote controlled outlet switches) with a receiving station. The receiver would be the "expensive" part, the gateway to Wifi/Internet and contain all the logic that links a button press to something usefull like a HTTP request.

A kit of

5x Etekcity Outlet Receivers 2x Remote Control Transmitters 2x 12V Batteries

can be had for 30 bucks including shipping, so based on that I could see it done.

Edit: obviously the behavior of such a button would have to be much better than a typical cheap remote control regarding reliably registering and then transmitting each and every button press, so the comparison is of course very limited

bigiain2• 11 years ago

The wifi and a tiny microcontroller are available for around $5 in single units these days - google "esp8266" - I'm only _marginally_ surprised Amazon can ship these for $5, but I bet they aren't making much (if any) loss on these at their volumes.

jo9092• 11 years ago

If $5 was near their costs, wouldn't they then sell it for 2$ or something, because Amazon (and their brand partner) make money with the button later?

I bet the $5 price point is something they arrived at mostly by asking what customers are _willing_ to pay.

That whole concept is so new they would not hinder it's success by making the button $10 or anything near the true cost. Amazon is all about investing in growth, and this is very likely an investment. Maybe not even that much in additional sales, but in mindshare for a totally new and unique shopping experience.

All of that does not work for an open "does anything you want"-button, so anybody designing and selling such a thing would have to think very very different about the hardware cost.

ja27• 11 years ago

I need to get one Dash button and set it up so that pressing it orders more Dash buttons.

Rimpinths• 11 years ago

Does this remind anybody of the CueCat? Same story...subsidized hardware that hackers repurposed for other uses. I think the makers of CueCat tried to unsuccessfully sue the hackers:

https://en.wikipedia.org/wiki/CueCat

http://www.securityfocus.com/news/89

Do the Amazon Dash buttons come with a license agreement? Has anyone read it to see if it prohibits these kinds of hacks?

nivla2• 11 years ago

Well CueCat was "free" (Although mostly forced on you). Amazon dash is a regular paid product on Amazon. Neither of them can hold you accountable for hacking/repurposing it. However, if someone has a chance that would be CueCat.

Sanddancer2• 11 years ago

Wifi chips are cheap. So cheap, that I'd all but guarantee they're still making a profit on it, even at $5. You can get ESP8266 chips from people in china for about $2.50 each including shipping, and those will do everything these buttons do. Given Amazon's volume, they probably cost half that for them, so hacking them is pretty much free advertising.

hoodoof2• 11 years ago

I'd user it for recording start and end time of tasks and activities. Put it on the desk, start and stop.

hoodoof2• 11 years ago

Mount it under your chair so you know how much time you spend sitting each day.......

nkurz2• 11 years ago

I was wondering the Button was configured for WiFi access. It's more interesting than I though. It's configured by running a Dash Button app on your Android or Apple smart phone.

The Android version works about as I would have guessed, by using the Dash Button as an access point, and the app helps you connect to it. But the Apple version communicates with the phone by ultrasonic tones!

https://www.amazon.com/gp/help/customer/display.html?nodeId=...

BHSPitMonkey• 11 years ago

Google's Chromecast can be configured using both of those methods, too.

andrewstuart2• 11 years ago

How to buy from Australia....

andrewstuart2• 11 years ago

Love button. Press it to send an SMS telling your wife you love her.

esaym• 11 years ago

Sounds cool, easy, and cheap. Not sure what I would do with it. Here is a tear down: http://mpetroff.net/2015/05/amazon-dash-button-teardown/

I can't find how long the battery lasts and with only one AAA, it might not be that long.

sliverstorm2• 11 years ago

It's popular to observe that cell phones are more powerful than the Apollo 11 spacecraft. Well, this button further highlights just how far along we've come.

The Apollo 11 AGC was 16-bit, 2MHz.

The Dash Button is 32-bit, 120MHz, and at $5 is practically disposable.

d232• 11 years ago

Awesome article and idea.

Would it be unreasonable to try to reverse or update the actual code on the hardware to get it to send a request to an arbitrary server instead? I'd love to team with a hardware person to cut out the layer of having to have a script polling the network to find the device. It's always been something I've wanted to learn more about. Or is that unrealistic?

nkurz2• 11 years ago

Yes, it's very possible. This project might help: https://github.com/dekuNukem/Amazon_Dash_Button

Starting with an Arduino that designed to be programmed would likely be an easier first project, though.

azernik• 11 years ago

Side note - that is the most relatable explanation of ARP probing I've ever seen.

jmorrow977• 11 years ago

Someone please release a generic "generate event" button! (Or please tell me where I can get one... Googling for "wifi enabled button" provides irrelevant results).

Below someone mentioned this: https://flic.io/ But apparently it is only for pre-order right now.

Update: I searched for this on Amazon and noticed: "Available for Pre-order. This item will be released on August 31, 2015."

So, it seems it will be released not that long from now...

mkopinsky3• 11 years ago

Here at Penn we have a research platform where we try to motivate (among other things) medication adherence. We have integrated with various devices in the past that automatically track when the meds are taken, but for some reason the vendors of these devices always seem to flake out. We've been thinking lately that a simpler approach where people just push a button when they take their meds might be more sustainable, especially as a simpler device may reduce our dependence on those outside vendors.

What we're looking for: A simple, preferably small device, that we can program to make HTTP calls home to our server. Participants in our studies are scattered geographically and not all of them have wifi, so cellular is crucial. We have done studies with anywhere from a few hundred to a thousand+ participants, and hope to scale up beyond that as well, so cost at scale is a big factor. Today I came across bt.tn, and I love the UI simplicity of their product, but their prices are high, and it seems they don't include SIM cards with their buttons. Particle.io's prices are more in line with what we're looking for (especially the $3/month data fee), but my concern is that (at least from their website) the devices still look like hobbyist electronics with PCBs still visible, rather than like simple consumer devices.

Does anyone have suggestions for something with the UI simplicity of Amazon Dash or bttn but without bttn's price point? (Or feel like making us 500 or 1000 such things? The economics can totally be worth it.)

psyklic• 11 years ago

There have been a few projects on KickStarter that do this. For example:

+ https://www.kickstarter.com/projects/sparkdevices/spark-elec...

+ https://www.kickstarter.com/projects/konekt/konekt-dash-cell...

+ https://www.kickstarter.com/projects/264813863/bluz-bluetoot...

mkopinsky3• 11 years ago

Those are all dev kits, rather than consumer devices. I don't have hardware experience, and have no interest (in my current professional context) in ordering casings, mechanical buttons, or anything else. I just want to feed it a webhook URL and mail it out.

TazeTSchnitzel• 11 years ago

This is pretty cool!

I got distracted by the startup, though. Cloudstitch sounds kinda... strange. Their sole product is APIs that interact with Google Docs - well, Google Spreadsheets, they don't use the other formats. Are they wanting Google to buy them, or something?

alinspired• 11 years ago

Can't stop thinking of SilkRoad'ish evolution of this idea :)

saurik• 11 years ago

Wait, so the Dash button isn't an April Fool's Joke? I have been having conversations with people about those things every couple months and we still kept coming to the conclusion "it must have been a joke, but we aren't sure, and we actually can see a couple interesting use cases"....

How I Hacked Amazon’s $5 WiFi Button

Related Stories