---
id: 3863
title: "How a $20 Smart Device Gave Me Access to Your Home"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/how-a-20-smart-device-gave-me-access-to-your-home"
published_at: "2025-10-02 00:00"
tags: ["zero-day", "session-management", "iot-security", "smart-home", "yolink", "authorization-bypass"]
phying_url: "https://phying.com/item/3863"
lang: en
---

# How a $20 Smart Device Gave Me Access to Your Home

## Summary

The story behind the YoLink research: an authorization bypass lets attackers control other users' devices, Wi-Fi credentials travel in cleartext, and long-lived tokens permit persistent hub access.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2025-10-02 00:00
- **Original:** https://bishopfox.com/blog/how-a-20-smart-device-gave-me-access-to-your-home
- **Phying News:** https://phying.com/item/3863