24
Jun
nexusae0_nn_thumb

Sometimes corresponding events that might otherwise be considered mere coincidence are so amazing that they're attributed to serendipity or universal irony. This... isn't one of those times. But it might just make you go, "huh." Google's recent acquisition Nest Labs has launched the Nest Developers Program, which will allow developers to easily create connections between the smart thermostat and smoke detector hardware and other integrated devices. You can check out various tools and documentation at developer.nest.com.

Also launching today is GTV Hacker's first extensive post on the Nest, which exposes some alarming security vulnerabilities in the hardware. With a single file, the security researchers managed to gain root access to the device through the built-in Device Firmware Upgrade (DFU) mode. 

Nest-DFU-Attack

GTV Hacker's interest in gaining root privileges for the Nest are primarily in the name of security, because the device's automation features make it particularly disturbing to think of someone else gaining access. They'll be speaking about their work at DEF CON 22 in August. That being said, there should be some interesting things that developers can find to do with those root privileges. You can download the exploit and read the instructions at the link below.

Finally, the official Nest Android app has been updated to version 4.2.0.21 to work with the new developer program. You can get it at the widget below.

Source: Developer.Nest.com, GTV Hacker

PALO ALTO, Calif.--(BUSINESS WIRE)--Nest Labs, Inc. (www.nest.com) today launched the Nest Developer Program, which makes it possible for Nest and the more than 5,000 developers who’ve expressed interest in the program to work together to create meaningful interactions among Nest products and others – both inside and outside of the home. More than just linking and remote controlling the devices in your home, the Nest Developer Program allows everything from lighting to appliances to fitness bands and even cars to securely connect with Nest products, bringing the conscious home to life by making those homes safer, more energy efficient, and more aware.

“The Nest Learning Thermostat and Nest Protect alarm are already helping people save energy, stay comfortable, and improve home safety – but that’s only the beginning,” said Matt Rogers, founder and vice president of engineering, Nest. “Our goal has always been to bring this kind of thoughtfulness to the rest of your home and life – and that’s what the Nest Developer Program is all about. To kick off the program, we’ve worked with iconic brands like Mercedes-Benz and Whirlpool, as well as new industry leaders like Jawbone and LIFX, to build seamless, secure and practical Works with Nest experiences for the home.”

Featured Works with Nest integrations that are available now include:

  • IFTTT – Create your own connections with one simple statement: “If This Then That.” For example, “If my Nest Protect detects smoke, then send a text message to my neighbors.”
  • Jawbone – Nest knows which temperature you like and the Jawbone UP24 band can tell when you wake up. Working together, Nest will start to heat up or cool down the home before you even step out of bed.
  • LIFX – If Nest Protect detects elevated smoke or carbon monoxide (CO) levels, LIFX light bulbs can flash red to let you know there might be danger and help signal those who are hearing impaired. And when you’re on vacation and your Nest Thermostat is in Away mode, LIFX can make it look as if someone’s home by randomly turning on and off lights throughout the house.
  • Logitech – With the press of a button, the Logitech Harmony Ultimate universal remote can dim your lights, turn on your TV and start a movie. Now, it can also set the temperature on your Nest Thermostat, all from the comfort of your couch.
  • Mercedes-Benz – Your car can tell Nest when you’ll be home so your thermostat can start heating or cooling at exactly the right time. You don’t end up wasting energy when you’re not home and you’re comfortable the moment you walk in the door. You can also safely check on the status of your thermostat while driving.
  • Whirlpool – If your Nest Thermostat notices you’re away, it can have your Whirlpool washer and dryer keep clothes fresh and wrinkle-free when the cycle ends. The dryer can also switch into a longer, more energy efficient cycle when you’re away. And if you’re enrolled in Rush Hour Rewards with a participating energy provider, Nest can let Whirlpool know when an energy rush hour is about to happen, and your washer or dryer will delay the start of the cycle until the rush hour is over.

Additional integrations launching this fall include:

  • Chamberlain – Open your garage with Chamberlain, LiftMaster or most brands of garage door openers when you arrive, and Chamberlain MyQ can tell Nest you’re home. Close it on your way out, and your thermostat can go into Away mode so you don’t waste energy heating or cooling an empty home.
  • Google – Just speak a command, “OK Google. Set Nest to 75 degrees,” and your Nest Thermostat will do as you say. And with Google Now, you can be on your way home, and your thermostat will start heating or cooling before you get there.

“When we first heard about the Nest Developer Program, we knew we wanted to be a part of it,” said Phil Bosua, LIFX founder and CEO. “Nest brings a whole other dimension to LIFX. Who would have thought by combining Nest products and LIFX products, we could help save lives?”

“We’ve been working with Nest to create a home experience that is both purposeful and thoughtful,” said Brett Dibkey, vice president and general manager of Integrated Business Units for Whirlpool Corporation. “Now, your thermostat can interact with your washer and dryer to keep your clothes fresh until you need them, and even help you save energy.”

And these are just the first of many Works with Nest experiences that will be possible with the Nest Developer Program. For more information and to learn about new Works with Nest products, visit www.nest.com/works-with-nest.

Tools for Developers

With the Nest application programming interfaces (API), all developers – from global corporations and small companies to startups and hobbyists – can access Home and Away states, smoke and CO alerts, and peak energy rush hour events to build interesting and meaningful integrations while maintaining control of their own user experiences. In all instances, Nest customers must authorize a connection before any data is shared. The Nest Developer Program provides developers with all the tools and support they need to start building across iOS, Android and the web, as well as the ability to leverage the Works with Nest logo in their product marketing. And to ensure communications between Nest and other products are secure, Nest uses industry-standard SSL for encryption. For more information about the Nest Developer Program, including Nest’s privacy policy or how to start building with Nest, visitwww.developer.nest.com.

Developers who are registered for Google I/O can also attend Nest’s session titled, “Nest for Developers,” on Thursday, June 26, at 2:00 PM PDT to hear Matt Rogers and team discuss the program.

Thoughtful Things Fund

To fuel promising Works with Nest ideas that expand the possibility of the conscious home, Google Ventures and Kleiner Perkins Caufield & Byers will lead the Thoughtful Things Fund to provide developers an opportunity to secure the support and visibility necessary for getting projects off the ground.

“Nest is a great example of how the right idea can change the world,” said David Krane, Google Ventures General Partner. “We invested in Nest because we believe in the company’s vision for the connected home. Nest has delivered on that early promise, and now we’re ready to support the next generation of founders and companies to push the boundaries in this space.”

Developers can submit their ideas at www.thoughtfulthingsfund.com.

Privacy and Security for Nest Customers

Nest believes in being open and honest about how we use customer data and we do everything we can to protect customer information. For authorization, we use the industry standard OAuth2.0. In addition, we require that our developers let users know what information they’re requesting and why they’re requesting it. That way, when users choose to authorize a connection between their Nest device and another product, they understand exactly what they’re authorizing and how it will benefit them. Nest limits the amount of data held by developers by not sending them personally identifiable information about users or permitting them to retain more than ten trailing days of data. Users can choose to disconnect an integration at anytime. If for any reason they decide to delete their Nest account, Nest will automatically disconnect any active integrations, as well as erase their personal information from Nest servers.

Michael Crider
Michael is a native Texan and a former graphic designer. He's been covering technology in general and Android in particular since 2011. His interests include folk music, football, science fiction, and salsa verde, in no particular order.

  • Dee Norbert

    Wow

  • qpinto

    so im trying to figure out, whats the benefit of rooting your nest? i mean its a thermostat...

    • http://thomashunsaker.com Thomas Hunsaker

      Custom firmware?
      ROOT ALL THE THINGS!

      Maybe if you don't like a setting you can adjust it, or use the device in ways nest won't allow? Change the color scheme? Turn it into a game controller? Make it a multipurpose button for home automation? Control music from the Nest?

      Aside form the security concerns that it brings up, I don't see a point to rooting the Thermostat.

      • qpinto

        turn it into a game controller? LOL that would be like the apple macbook wheel!

    • The Motto

      Well now that Nest has opened their developer program; not a lot.. Before there was a lot of things that could have been cool to do with the Nest that where not possible. Now imagine having a internet connected system that controls your electrical outlets and light integrated with your Nest thermostat.....

    • Cory S

      I'd be interested into integrating all of its sensors directly into my home automation system (SmartThings) A motion sensor is 30-60 bucks, and this thing has one.

    • Jason Bourne

      If you have root access, you can install Linux and emulate Mario. All the controls are there. Twist to go left and right, push to jump... and oh wait, that's right, you're one button short. Oh well.

      You could always disguise it as a bomb to assassinate a target in Egypt as backup.

    • Joris Griffioen

      Root is a security problem. This is not necessarily about benefits but about dangers..

  • wideopn11

    It would be cool to expand on some of the settings. For example running the fan for 15 min every hour is nice but I would prefer to have an option of 15 min every 2 hours or 10 min every 3 hours and so on depending on whether I'm home or not.

  • ProductFRED

    Did we seriously just root a thermostat...

    • OhYeah!

      Nope, but someone smart just did.

    • Daniel Collins

      Hell yeah, we did!

  • Roy Lok

    They Surrendered

  • OhYeah!

    They also claimed they rooted the Vizio google tv years ago and nothing ever came of it. Don't really get the point.

  • DanSan

    i want to root my office keurig machine... lets get on it people.

  • Felipe Pimenta

    I might have missed it, but I think nobody mentioned that. Anyone noticed Google (Now) integration mentioned in the Press Release?

    Mentioned right after Google. It says: “OK Google. Set Nest to 75 degrees,”

    • Martin Ansty

      And "launching this fall". Confirmation of expanded Google Now access in Android L?

  • TedPhillips

    sorry, the root technique for nest is not concerning to me.

    you need physical access to the device to put it into firmware update mode, there is no 'over the wire' exploit.

    the fact that the firmware update stack was left open in this manner is the same as saying 'fastboot oem unlock' is a security concern on android phones.

    I'd expect android police to cover that a bit more accurately.

    I like the gtvhacker guys, but they have a vested interest in tooting their horns (their work is deeply tied to the security talk schedule), to the point where if their talk is not accepted they sit on the work (keeping it private).

  • mehmehmeh

    Can I just get some IFTTT integration plz kay thx

  • Zimmerman

    I love my Nest! My power bill was only $50 the last two months!