Eco Plugs Wi-Fi Controlled outlet by KAB

Well obviously I am not going to paste my wifi info but you can see the packet below captured on my phone which appears to have the wifi SSID and passphrase in clear text, the erased spot near the beginning of each line is my public IP and the second erased spot on each line is clear text wifi SSID and passphrase. These captures are obviously part of the ECO plugs as they have the names I gave the outlets. I don’t feel secure knowing that information is being transmitted with each press of the button in the app. I am not sure why the SSID and passphrase need to be in the packet at all, especially with it being transmitted to some unknown IP address (210.65.89.22).

1 Like

I managed to load some home-brew firmware on the device; I have a how-to here:

Reading this about the security risks; I’m happy I did. My firmware doesn’t require authentication for control yet so it should only be used on networks with trusted clients. Atleast it won’t transmit your SSID and Password outside of your network!

2 Likes

@scootermcgoober Thanks for sharing. I will likely try that with at least a couple of mine.

Has anyone figured out how to add more than 12 devices to the Wion app? Meaning reprogramming the app for 12+ devices.

Thanks

If you are using their cloud, you can use the Eco app and the Woods app separately. They will both show all the local devices, but while local to something you can attach it to the cloud and it will keep that connection in that in that specific app. So you could have double the number of remote links. Anyone else know of a third copy of this app by another vendor that could be installed?

I’ve seen these at Home Depot in Canada, and they are definitely cheaper than any z-wave or zigbee controlled devices I’ve seen. I’m not a programmer so I can’t help much, but I’d love to see a way to make these work with SmartThings!

When the plugs are in local mode (no internet access available) the app and the plug seems to use UDP / QUIC to pass a quick message (sent a couple times) to turn on or off the device and then a couple of repeated packets back in confirmation.

When the internet cloud is available and you’re not local to the device, it’s more complicated internet stuff and includes the SSID, etc that Motley was concerned about. (but that can just be blocked at the firewall, so the power module never talks to the cloud and is always in local mode.)

I wonder if we are allowed to have the ST Hub send a UDP packet using Groovy. I’ve seen a rare bit of code here or there where people tried and it used to work but doesn’t now, etc…all rumors. Maybe the solution is a little webserver that takes an address along with an on or off and releases a little UDP packet into the net. I Hope that another device to run a gateway just to make the worlds cheapest power switches work is not needed. :wink:

…then again, maybe they aren’t cheap anymore and its best left alone.

Has anyone figured out how to reprogram the app to add more than 12 devices?

I emailed Kab asking about the password and ssid being sent to the server and in the clear and here is their reply. So hopefully they will no longer be doing this for much longer.

We had sent this information to our engineer team and have checked the design plan record. Why the telecommunications have this action? Our engineer team considered the 2nd Wi-Fi Plug setting, it hope can use it and easier to install when end user want to setting it under same SSID, so the 2nd Wi-Fi Plugs can easy complete the installation. Anyhow, we had the meeting to discuss this issue; the result is we will update the App and modification. When this App is updating it, we will let you know and also thanks your advice again.

Have a nice day.

Yet another company selling rebranded KAB products. So now it’s HD’s, Walmart’s, Wood’s and Vivitar.

http://www.vivitar.com/products/115/smart-home/2361/smart-plugs

I was browsing at Fry’s and stumbled across the products. Tried to find the app, but it looks like it may just be the Eco Plugs app. Even the product packaging has their logo. Pricing is reasonable. Especially for the wall switch.

http://www.frys.com/search?search_type=regular&sqxts=1&cat=0&query_string=vivitar+smart

If someone could only get them working with SmartThings.

Any luck getting these to with with ST?

Great efforts here guys. Wish I was as smart as you… :slight_smile: Any more activity on WiOn products with ST? I would use this like crazy since I have been using many WiOn outlets before recently getting my ST hub and system… Would be a huge win.

Thanks in advance.

Home Depots are starting to get their Holiday layouts. My local store has this product back in stock! The big difference is that last year it was a two-pack for a price around $39.97. This year it is just a single outlet for $19.88. The SKU number is 1001763273.

search for “workchoice indoor switch” on walmart.com, 18-24$, all have the power use / chips to show power used, they have them available year round.

Anyone else worked on making a ST SmartApp yet based on Danimal4326?

Just keeping the tread alive, any updates on this?

I was thinking of setting these up on a dummy network that doesn’t access the internet. I could access the network with my iOS or android device and then just control them within the house. I want these for extra vacation timers so I wouldn’t be interested in accessing them from outside the network. Does anyone think this might work?

Not using ST (yet?) just Google Home & Harmony Hub to control AV. I got a few of these plugs yesterday at HD for $7 and I’m interested to see if anyone figures out how to integrate them. IFTTT would be a great start! Anyone how to request such things?

1 Like

Without hacking the device I am able to control this device on my server using code from here (beta branch):

https://github.com/SingleDadLiving/homebridge-ecoplug/tree/Beta

I could then run:

node PlugControl.js -a on -pn “Plug1” -id “ECO-XXXXXX” -ip “192.168.1.206”

-a could be on off or state. -pn can be whatever. -id is your ECO ID from the ECO/WION app. -ip is the plug IP.

Is there a way to call this from SmartThings?

2 Likes

If your router provides for a guest network, just setup the Eco outlet on the guest network with a different password from the home network. Having the Eco on the guest network should wall it off from the home network. Right? Then, you can control the outlet from anywhere, not just within your own WiFi network. It could still be recruited to a bot army. But, that’s not your problem.

1 Like