Locked out of 'God Mode', runners are hacking their treadmills

This type of &#x27;update&#x27; is one reason I tend to stay away from so-called &#x27;smart&#x27; devices.<p>If part of the product I&#x27;ve paid for is software, and the company can update it without customer consent at any time, then I can&#x27;t rely on the product&#x27;s features. Period.<p>I experienced this myself on the PS4 version of Terraria. I bought a hard-copy of the game. I mastered the controls, and loved them. Terraria was updated one day, and the controls were all changed, completely. Total rip-off. I liked the game I bought, but it was replaced without my consent.<p>My feeling is that this behavior should be illegal for purchased products.

The method to get into &quot;God Mode&quot; is the same, except now it prompts you for a code. Someone has figured out how to calculate it and actually created a website to generate codes for you.<p><a href="http:&#x2F;&#x2F;getresponsecode.com" rel="nofollow">http:&#x2F;&#x2F;getresponsecode.com</a><p>Apparently the algorithm is very simple according to Reddit <a href="https:&#x2F;&#x2F;old.reddit.com&#x2F;r&#x2F;nordictrack&#x2F;comments&#x2F;ozkp8v&#x2F;privileged_mode_patched&#x2F;hoazr1z&#x2F;?context=3" rel="nofollow">https:&#x2F;&#x2F;old.reddit.com&#x2F;r&#x2F;nordictrack&#x2F;comments&#x2F;ozkp8v&#x2F;privile...</a><p>&gt;long responseCode = new Random((long) Integer.parseInt(iFitCode)).nextInt(999999);<p>It&#x27;s not a perfect workaround, as it resets on the next boot, but I&#x27;ve seen that people are installing apps such as Taskbar which float overtop the iFit app and start on boot, allowing you to still launch your apps like Netflix etc even without God Mode enabled.<p>It&#x27;s only a matter of time before Nordic decides to block this method as well. We should also be looking into how to block updates to these devices.

Jeeze, I will stick with my modular solution: an ipad on a music stand. This is compatible not only with any commodity treadmill, but also bike trainers, ellipticals, and making vroomvroom noises on the motorcycle when it&#x27;s too icy to actually ride. I could also swap out the ipad for a laptop, non-ipad tablet, or a collection of cute succulents should I desire it.<p>snark aside, I&#x27;m a bicycle guy and I really like that we have an ecosystem of bluetooth trainers and apps that all work pretty well with each other. Simulating hilly courses is actually really useful and has made me a better rider, so it&#x27;s not like I&#x27;m advocating being a total luddite. While I prefer to ride outdoors in the sun, my area in Iowa is extremely flat and the only difficulty comes from the wind, and I find the new toys are a lot more fun than a dumb trainer with a sufferfest DVD. I don&#x27;t really know much about the treadmill scene but I hope you guys have access to similar stuff.

&quot;NordicTrack says it supports right-to-repair rules. However, because of its equipment’s moving parts, the spokesperson says, it believes that restricting access to its operating system is important for safety. &quot;<p>The real reason they don&#x27;t want people using other apps or watching third party videos is because anyone doing that is not spending money on iFit. Or, at least, not as much as they could be. NordicTrack likely discounted these treadmills to squeeze out competitors with the intention of making their money back by locking customers into iFit.<p>If a few users hack their treadmills, that&#x27;s not going to hurt NordicTrack&#x27;s bottom line. If most users are doing it because it&#x27;s as easy as tapping the screen 10 times, then there&#x27;s a problem. So, NordicTrack has made it harder to gain admin access. Not impossible. Just harder. More people will go back to spending money on iFit, the determined few will roll up their sleeves, and the business model will be restored.<p>The problem is that this business model is a bait and switch. When people pay for a treadmill they don&#x27;t expect to be locked into further monthly payments to unlock its features. It&#x27;s inherently dishonest, and the victim, aside from users, is the competitor who produces an honest product that&#x27;s paid for entirely up front and is, hence, more expensive and less competitive.

My solution to this problem would be legislation that allows customers, if they wish to, to return devices for a full refund if the company that manufactures the device makes a change that removes functionality that the customer valued. This doesn&#x27;t prevent the company from making the change, it simply makes sure that they incur a cost for doing so, and it makes whole any customer affected by the change.

Not the first time a company has pushed an update that removes important features.<p>To my knowledge the first high-profile instance of this was when Sony updated the PS3 to remove Linux support, which resulted in a successful class-action in the US. [0]<p>[0] <a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;OtherOS" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;OtherOS</a>

Classically the feature was taken away to make you safer :)<p>&gt; The block on privilege mode was automatically installed because we believe it enhances security and safety while using fitness equipment that has multiple moving parts,

This is related to why I bought a concept2 erg recently. Hurt my achilles and needed to switch to a low impact exercise, which I prefer to be able to do at home rather than going somewhere else (so swimming is out).<p>Looked at Peloton, but it&#x27;s about twice as much as an erg up front, has running costs each month, and what seemed to be many more points of failure (which includes the electronics). The Concept2[0] is a tank that should last me a very long time. Space is an issue (I had to shove my dining table to the side), but the workout is amazing and I have a lot of faith in the machine to last. Plus it has a pretty straightforward bluetooth connection if I want to get data out and multiple USB and ethernet ports on the very simple monitor it came with.<p>[0] <a href="https:&#x2F;&#x2F;www.roguefitness.com&#x2F;black-concept-2-rowerg-rower-pm5-black" rel="nofollow">https:&#x2F;&#x2F;www.roguefitness.com&#x2F;black-concept-2-rowerg-rower-pm...</a>

Following Wirecutter&#x27;s suggestion, I got a ProForm 505 treadmill. Like Wirecutter said, it&#x27;s cheap, a bit janky, but does the job adequately for a &quot;non-pro&quot; like me.<p>When unpacking it and setting it up, there were multiple notices everywhere: On the packaging, as a separate note in the packaging, in the manual, on the treadmill itself. Those notes all said that the treadmill is &quot;locked&quot; and you need &quot;online activation&quot; to unlock it.<p>I was getting very nervous, since I thought I bought something that does not need online activation.<p>However I think it was also Wirecutter that mentioned that you can just press the iFit button for longer than 15 seconds--or was it 30 seconds?--and it&#x27;s &quot;unlocked&quot;. I did that once and it worked ever since, never needed to do anything online, or connect it via Bluetooth, WiFi or anything else.

Suitable story, hacking walled gardens on HN.<p>Reminds me of the Rigol DS1054Z 50 MHz oscilloscope, that you can trivially &#x27;hack&#x27; into the more expensive DS1074Z 75 MHz or DS11074Z 100 MHz scope. Rigol hasn&#x27;t disabled this hack, even though they can easily do it. They likely loose money if they do so, since customers move to other scopes.<p>Also, some Tesla updates make the experience worse instead of better (V11 update is terrible, inconsistent UI and much more menu diving). I should have disabled auto-updates, and read the forums before doing the update next time.

We need an Electronic bill of rights.<p>1. You must allow full root privileges for Electronic devices to the owners<p>2. You may not circumvent owners rights through leasing or other means.<p>3. You may not create barriers to device owners using their devices how they see fit.

If Nordic is being honest that the issue is safety- preventing users from diddling with their software and accidentally making it unsafe, then they can simply install a browser so the users can view what they wish online.

It should be illegal to remove features from a hardware product with a software &#x27;update&#x27; without offering all pre-existing customers to return the hardware if they affirm the removed (or newly pay-gated) feature was a factor in making their purchase.<p>Customers currently have zero recourse, because they are paying for the hardware, but the software allows the hardware functionality to be changed or removed at whim without any financial risk to the company. Credit card chargebacks may work sometimes, but only if the purchase was recent: &#x27;smart&#x27; hardware vendors often ruin their products more than 90 days after purchase.

&gt; NordicTrack says it supports right-to-repair rules.<p>I don&#x27;t get why companies think this kind of blanket statements are useful, when they&#x27;re immediately made null by their actions.<p>&gt; However, because of its equipment’s moving parts, the spokesperson says, it believes that restricting access to its operating system is important for safety.<p>This is such obvious BS, when the real kicker is that after you already shelled $4k, they really really want you to rack out that sweet sweet monthly subscription money and don&#x27;t want any competitors on a screen that, it turns out, they can control.<p>Greedy manufacturers wanting to get into that monthly recurring revenue model.

&quot;God Mode&quot; make it seem like such an unreasonable request. How about &quot;Owner Mode&quot;?

On October 28, I bought the NordicTrac T-Series for $650.<p>After installation, it had a lock screen asking me to subscribe to start using the treadmill!<p>Can you imagine?<p>I paid for the treadmill, and you&#x27;re telling me I can&#x27;t even walk on it without paying you again?<p>So what did my $650 pay for?!?<p>If I can&#x27;t use a device&#x27;s most basic function without paying an additional subscription, then can Amazon label the button &quot;Buy Now&quot;?<p>What exactly did I &quot;Buy&quot; if it&#x27;s a paperweight without an additional subscription?<p>Nowhere did the product page say that having a subscription is a pre-req to use this device: <a href="https:&#x2F;&#x2F;www.amazon.com&#x2F;gp&#x2F;aw&#x2F;d&#x2F;B0193V3DJ6" rel="nofollow">https:&#x2F;&#x2F;www.amazon.com&#x2F;gp&#x2F;aw&#x2F;d&#x2F;B0193V3DJ6</a><p>Thankfully, the company Amazon hired to setup the treadmill found the trick to bypass that screen.<p>But now, after hearing about this update, I&#x27;m afraid they will lock my treadmill again.<p>I just use my treadmill to walk on it.<p>I don&#x27;t need any apps.<p>Left to their own devices, these companies will find a way to charge us to breathe.<p>So happy I&#x27;m not looking to any human governments to fix this nonsense.

This is a couple of months old now, posted a few times.. not much discussion:<p><pre><code> [0] 8pts&#x2F;1 comment [1] 15pts&#x2F;1 comment [2] 5pts&#x2F;0 comments </code></pre> [0]: <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=29288525" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=29288525</a> [1]: <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=29292826" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=29292826</a> [2]: <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=29296501" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=29296501</a>

Exactly why I only buy dumb devices ex: <a href="https:&#x2F;&#x2F;non-smart.com" rel="nofollow">https:&#x2F;&#x2F;non-smart.com</a> type stuff

<a href="https:&#x2F;&#x2F;archive.is&#x2F;J2BM8" rel="nofollow">https:&#x2F;&#x2F;archive.is&#x2F;J2BM8</a>

That it was advertised anywhere in documentation as possible is what makes it a hostile move by the manufacturer.<p>Had this been just some kind of open secret “hack” then buyers really should expect this.<p>Remember: when you buy a gadget with a screen and associated “services” like video subscriptions you aren’t just buying a lump of tech. Your price is set after careful weighing of how much customers will consume the subscription services. If the add on service is provided by a third party it’s even worse: your products’ ability to deliver something other than their service is probably a breach of contract.<p>My guess: the treadmill makers didn’t mind people watching Netflix on their gadget. Their partners on content though has given them deals on the premise that everyone who didn’t buy a subscription <i>should</i> have a feeling that they wasted $4k on an empty screen. So when they hear a number of users are watching Netflix, they get angry. Treadmill makers must block the god mode.<p>The sad thing here is obviously that the idea of making a good open product without strings attached or subscriptions seems like an impossibility these days.

When I read these articles, where people buy 4000$ treadmills only to watch netflix using an unsupported feature, I wonder why they don&#x27;t buy a 1000$ treadmill without any display, a 50$ tablet stand, and an iPad or Android tablet (that they probably already have). You&#x27;d get exactly what you want, for a cheaper price..

I bought a proform pro 2000 treadmill at costco.<p>On the box, it mentioned &quot;one-year iFit membership included (then says wifi and registration required for ifit)&quot;<p>I didn&#x27;t want to use iFit, I just wanted to use the treadmill.<p>However -<p>You can&#x27;t use the treadmill without connecting it to wifi, except for &quot;manual mode&quot;. ZERO workouts. This involves dark patterns for setting up your treadmill and avoiding a wifi connection. then you can select manual mode - which can ONLY set the speed or incline manually.<p>Oh yeah, this treadmill has an embedded camera and microphone.<p>The description is a dark pattern, the UI is a dark pattern. pro-form has a horrible reputation from my direct experience.<p>so I use it in manual mode. I don&#x27;t use the 10.1&quot; touchscreen except to start it moving.<p>I suggest folks who want a treadmill just go to somewhere like Dick&#x27;s and look at the treadmills and buy one after checking out the UI in person.

Not that NordicTrack cares about purchases from l&#x27;il ol&#x27; me in the larger scheme of things, this is precisely why we didn&#x27;t buy a NordicTrack treadmill despite being tickled with our NordicTrack rowing machine: that screen is there for NordicTrack&#x27;s benefit, not yours. Sure, I&#x27;m a software engineer as well as owning a soldering iron and knowing how to use it. But if I&#x27;ve got to unsolder&#x2F;resolder wires or cut traces on my brand-new machine to get the functionality I thought I paid for, I bought the wrong machine. If I have to use a software hack that is one update away from not working anymore, I have purchased the wrong machine. I&#x27;ll let others rant about not being able to use the hardware that one paid for, I&#x27;m just not going to pay for the HW in the first place. (And, honestly, how many of us on HN need <i>another</i> screen around the house?)<p>It&#x27;s disappointing, too, because we&#x27;re quite satisfied with our NT rowing machine, which was purchased right before the &quot;big screen&quot; models, and we would otherwise recommend it. But now you can&#x27;t buy the one with the cheap LCD display like we have and just bring your own screen, you have to get proprietary screen models now. So I don&#x27;t recommend their rowing machines anymore, either.<p>After much research, we bought a treadmill from Horizon fitness[0]. We&#x27;ve been nothing but happy with it, which is their top-of-the-line 7.8. It has BT for music to play over the built-in speakers, and it works fine with Zwift and even the iFit subscription that NordicTrack pushes (it just won&#x27;t auto-control the treadmill speed&#x2F;incline, which is a-okay by me). BT streams your data to Zwift, et. al., including speed&#x2F;incline&#x2F;HR. It has a built-in stand for your tablet, though anyone on HN ought to be able to rig some cheap 27&quot; 4k monitor in there somehow (we use a wall-mount for the rowing machine that swivels for general purpose use). The spouse and I have used it with Zwift, iFit, and Apple Fitness+, though Zwift is the only one that cares about data from the BT stream. As running goes I used to be fast, but now I&#x27;m just old and still faster than most, and it does everything I need for dark, rainy PNW days. I use it for tempo and intervals on occasion as well, and the one-button presets for interval&#x2F;recovery are nice so when I&#x27;m gasping for breath I just need to be able to push the recovery button.<p>Anyway, no association whatsoever with Horizon, just a very satisfied customer.<p>[0] <a href="https:&#x2F;&#x2F;www.horizonfitness.com" rel="nofollow">https:&#x2F;&#x2F;www.horizonfitness.com</a>

Wow, sounds like a huge missed opportunity! If so many people were willing to pay a premium price for a device primarily because of how easy it was to customize, then perhaps it should be marketed that way in the first place.<p>Hardware vendor lock-in subscriptions may seem to the corporate world like a big win on paper, but how many customers are they losing who are willing to pay for a very premium product that they get full control over? (looking at you peloton)

This is why I don&#x27;t buy specialty hardware devices anymore. I jumped off the smart device treadmill with the fitbit.<p>The only thing in my house that gets access to the internet are my computers and phone. Nothing else. If I turn it on and it complains about no internet - it gets returned as defective.<p>I have a car charger (Juice Box) that have a smart app to control it. Nope not for me. Last thing I want is a hacked device fucking with my car&#x27;s charging.

I really hate how we are moving more and more towards &quot;managed experiences&quot; in products. Used to, you would buy a product and use it how you see fit. But these days it seems that&#x27;s not what the company wants you to do. You buy the product and enjoy a &quot;managed&quot; experience from the company.<p>We see it everywhere with printers, coffee makers, phones, laptops, treadmills and even cars now. Everyone knows why this is being done, simply making money on a $99 coffeemaker is not good enough anymore, we have to make that $99 plus we have to make money in perpetuity because the customer now has to subscribe to our &quot;managed experience&quot;.<p>Now I understand this on some level with cheaper stuff like printers, that printer doesn&#x27;t cost $20, it costs that because the company assumes you will buy the pods from them. But with a treadmill that goes for thousands it&#x27;s a completely different ball game.<p>Were going to get to the point where one day you will hop in your car and start driving into the countryside. At a certain point your car will just shut off because &quot;Ford has decided that this route in unsafe for your vehicle, for the best experience, please drive back to the city, on your way back, consider enabling cup holders for an improved coffee drinking experience&quot;.<p>The glimmer of hope on the horizon are companies like Framework and Pinephone. These companies realize that consumers are not happy with this shit and market themselves as the antithesis of these practices. I really hope these types of companies take off in the future.

A construction worker moving to cloud security and in a single sabbatical year already scrutinizing by himself the firmware and closed OS of a treadmill.<p>makes me happy. Hope a lot of people can leave behind those low paid high effort jobs thanks to this 2 shitty years

I&#x27;m utterly disappointed I didn&#x27;t see any footage of DOOM running on it. If those hackers didn&#x27;t spend so much time trying to be healthy, they could focus their time on an actual worthy task! &#x2F;s

Does anyone know the domains they use to connect&#x2F;update? I’ve got one of these (different brand) but still unlocked by the 10 taps method. I’ve still never connected mine to WiFi but I like to dim the screen. I could setup DNS blocks and then connect to WiFi to verify it works for a more long term solution for folks (well, that intersection of those that run a pinhole and on a treadmill).<p>I didn’t connect it to WiFi (even after unlocking) primarily because I worry about it being another data collection tool (WiFi, bt) and it has a camera&#x2F;mic on it.

&quot;God Mode&quot;? What they describe is just how to access developer options on an Android device, isn&#x27;t it?<p>It doesn&#x27;t provide root access or anything, just the ability to sideload apps and a few other things.

A good reason why I don&#x27;t like to buy smart devices.<p>That said, I think that if we want right-to-repair&#x2F;tinker I think we also have to make reasonable concessions as well. E.g. No liability for the manufacturer due to running older or non OEM versions of software&#x2F;firmware. No expectation of ongoing support or updates on those older branches. Of course liability should still exist for issues that were not caused by this alternate software even if you&#x27;re running it.

Is there any theory as to what NordicTrack hopes to gain out of preventing customers from using the screen as they see fit? NordicTrack already has the customers&#x27; money, so why would they really care?<p>Are they trying to do some kind of advertising on the screen? Are just going through run of the mill security updates and there&#x27;s bad communication between the customers and NordicTrack not understanding each other because of a layer of dumb bureaucracy between marketing&#x2F;developers?

This is obviously wrong and should be blocked via laws, but just in case you&#x27;re here and <i>haven&#x27;t</i> heard of pi-hole (<a href="https:&#x2F;&#x2F;pi-hole.net&#x2F;" rel="nofollow">https:&#x2F;&#x2F;pi-hole.net&#x2F;</a>) taking internet-of-shit devices and blocking all the ways they try to access the net is kinda fun.

Honestly, it is getting to the point where your best bet is to buy a cheaper device with minimal features, then mount a screen onto it and hook it up to a Linux box to play what you want.<p>Cheaper and actually gives you what you want. Might force the vendor to allow for more customization, given a lot of people stop buying their premium range.

The alternative here is to buy a waterproof tablet, and a decent mount to attach it to your treadmill.<p><a href="https:&#x2F;&#x2F;amazon.com&#x2F;Arkon-TAB086-12-Tablet-Galaxy-Retail&#x2F;dp&#x2F;B00BCSYZVY" rel="nofollow">https:&#x2F;&#x2F;amazon.com&#x2F;Arkon-TAB086-12-Tablet-Galaxy-Retail&#x2F;dp&#x2F;B...</a>

&gt;&gt; and finding workarounds that allow them to bypass the update and watch whatever they want while they work out.<p>Like buying a TV and mounting it on the wall in front of the treadmill? Do these people not have access to 2x4s? Why does your TV screen need to be integrated into your exercise equipment?

The &quot;right-to-repair&quot; sentiment is totally understandable, as the article says. However, on the other hand, imagine some user modified the underlying Android, which caused the treadmill to run unstoppably, which end up injuring him. He then sues the company for millions of dollars. If I were the owner of the company, I would rather losing some customers than sleeping on a ticking bomb. Their move is also understandable.<p>I think an ideal solution could be the manufacturer officially supports accessing the &quot;privilege mode&quot; with some sort of &quot;release of liability&quot;. Customer must agree to this the first time they access, forfeiting warranty and ability to sue. Much like when people decide to unlock phone bootloader and root.<p>And to make all manufacturers willing to provide privilege mode to their products, I think either 1) the court makes clear statement of supporting this legally, or 2) having a supreme court precedence established for this, is required, otherwise some manufacturers would still fear the potential legal risk.

If you don&#x27;t have root on a software-controlled device, it isn&#x27;t really yours. Unfortunately, I think we&#x27;ve lost <i>a lot</i> of ground in that fight when it comes to consumer devices.<p>To the HN community at large: how do we start clawing it back?

&gt; “The block on privilege mode was automatically installed because we believe it enhances security and safety while using fitness equipment that has multiple moving parts,” says a spokesperson for NordicTrack<p>lol what a straight up fucking lie.

Totally dystopian. We need more dumb devices like <a href="https:&#x2F;&#x2F;non-smart.com" rel="nofollow">https:&#x2F;&#x2F;non-smart.com</a>

This isn&#x27;t &quot;hacking&quot;. This is &quot;using&quot;. As long as the current vocabulary is used, it will be advantageous for &quot;hardware hostage takers&quot;.

Remember Sony removing OtherOS&#x2F;Linux from the PS3? Yeah? No? That&#x27;s the reason I don&#x27;t buy Sony hardware anymore.<p>See, the issue is decades old. But somehow people keep forgetting.

I like my devices cheap, dumb and offline. Nothing else.

Every time I read an article like this I just imagine Richard Stallman&#x27;s face as he smugly says &quot;treacherous computing&quot;.

This hacks is impressive, but very pointless. A regular treadmill plus an iPad is a much better combo and it goes for $1k less total.

The short and completely correct reason as to why my e-reader has never, and will never ever, be connected to wifi.

Is the difference between a $500 treadmill and a $4,000 really just an Android tablet? A fool and money.

It seems these customers would be happier with any ole treadmill and a simple TV mounted to it.

I can hear RMS singing &quot;Join us now and share the software&quot;.

I wish it was even possible on my Peloton tread.

I have setup firefox to drop all cookies when closing and whitelisted a few websites I still need to bear cookies.<p>Upon using the above link, I ended up on a paywall. I hit F12 and check the creation date of all the cookies and confirm they had all been created the 19th (today, and incidentally had just woken up and turned on the computer). I refresh the website, still paywall.<p>I delete all cookies manually for that page, hit refresh and can read the whole article. I don&#x27;t understand how this is possible.

Wait until runners hear about &quot;outside&quot;.

I don&#x27;t understand this obsession with electronic exercise devices. The peloton, that stupid thing that mounts to the wall, treadmills etc.<p>Outside is so much better than all of those. I will 100% run in single digit temperatures with snow on the ground before I touch a treadmill. If I have to be inside it&#x27;s weight lifting.

Just put a screen on a stand infront of your treadmill?

I have an ebook reader mount I attach to the rafters. If I want to watch TV I set my laptop on some storage containers far back from the treadmill and put in my airpods. In both cases I&#x27;m looking straight ahead.<p>Looking down at the NordicTrack screen doesn&#x27;t seem ergonomic or comfortable. I don&#x27;t get this article.<p>Edit: From 2 points to 0. And probably going to go negative LOL.