Echelon fitness firmware lockout: Difference between revisions
| (2 intermediate revisions by one other user not shown) | |||
| Line 52: | Line 52: | ||
===Elimination of offline functionality=== | ===Elimination of offline functionality=== | ||
The update removes all offline workout capabilities, requiring constant internet connectivity for any device operation. Users report being unable to perform basic manual workouts without server validation.<ref name="viola-blog" /> | The update removes all offline workout capabilities, requiring constant internet connectivity for any device operation. Users report being unable to perform basic manual workouts without server validation.<ref name="viola-blog" /> | ||
==Echelon's response== | ==Echelon's response== | ||
Echelon | ===Press release=== | ||
On July 29, 2025, Echelon issued a press release announcing the implementation of "comprehensive security enhancements" including jailbreak detection mechanisms to prevent unauthorized access to their equipment.<ref>{{cite web |url=https://www.prnewswire.com/news-releases/echelon-implements-advanced-security-measures-to-prevent-any-unwarranted-access-to-fitness-equipment-data-302208547.html |title=Echelon Implements Advanced Security Measures to Prevent Any Unwarranted Access To Fitness Equipment Data |publisher=PR Newswire |date=29 July 2025 |access-date=27 August 2025}}</ref> The company specifically targeted QZ developer Roberto Viola, describing him as a "bad actor" who "attempts to bypass Echelon's fitness ecosystem" by charging users $6.99 for access to unauthorized connections. | |||
Echelon announced they are "actively reviewing legal action under the Digital Millennium Copyright Act (DMCA) and other applicable laws" against third-party applications. The company stated that customers using applications like QZ would have their warranties voided for violating terms of service and "compromising the secure operation" of products. | |||
CEO Lou Lentine framed the issue as protecting American intellectual property from "foreign individuals and entities," stating: <blockquote>"There are a few bad actors in the global marketplace who are constantly trying to shortcut the investments made by Echelon and other American companies—through fraud, copying, and stealing."</blockquote> | |||
Concurrent with blocking third-party access, Echelon announced a new "Authorized Partnership Program" for companies seeking approved connections to their equipment. The program offers access to official APIs and developer support, though no timeline or application process was provided. | |||
Echelon repositioned their offerings around two tiers: | |||
*'''Freestyle Mode''' - Described as "no charge" but requires internet connectivity for "secure sign-in authentication" | |||
*'''Premium Streaming Plans''' - Subscription plans starting at $19.99 monthly for access to classes and features | |||
The | The press release did not address the removal of offline functionality or the impact on existing customers who had purchased devices with advertised third-party compatibility. | ||
==FULU Foundation bounty== | ==FULU Foundation bounty== | ||
After the initial | After the initial publication of the story, Louis Rossmann released a $20,000 bounty<ref>{{cite web |url=https://www.youtube.com/watch?v=2zayHD4kfcA |title=Fulu Foundation offers $20,000 bounty to repair Echelon firmware lockout |author=Louis Rossmann |publisher=YouTube |date=July 2025 |access-date=27 August 2025}}</ref> for anyone who could create a method to bypass the restrictions placed on Echelon bikes. In August, the winner of the bounty was announced,<ref>{{cite web |url=https://www.404media.co/developer-unlocks-newly-enshittified-echelon-exercise-bikes-but-cant-legally-release-his-software/ |title=Developer Unlocks Newly Enshittified Echelon Exercise Bikes But Can't Legally Release His Software |author=Jason Koebler |publisher=404 Media |date=August 2025 |access-date=27 August 2025}}</ref> however the solution used to claim the bounty was not released. Louis Rossmann stated that the reason for not releasing was the impact of a US law (17 U.S. Code § 1201), which prevents the sharing of methods used to bypass a technological measure designed to manage access to a product.<ref>{{cite web |url=https://www.youtube.com/watch?v=chPzslZKBhI |title=I started an organization to dismantle the DMCA - here's why |author=Louis Rossmann |publisher=YouTube |date=27 August 2025 |access-date=27 August 2025}}</ref> | ||
==Consumer recourse== | ==Consumer recourse== | ||
===Immediate actions=== | ===Immediate actions=== | ||
The following | The following recommendations for affected users were made by Roberto Viola: | ||
*'''avoid all firmware updates''' & disable automatic updates | *'''avoid all firmware updates''' & disable automatic updates | ||
*'''delete Echelon app''' to prevent forced updates | *'''delete Echelon app''' to prevent forced updates | ||
| Line 71: | Line 81: | ||
*document current functionality for potential claims<ref name="viola-blog" /> | *document current functionality for potential claims<ref name="viola-blog" /> | ||
If it prompts you to install a firmware update on reboot, you may avoid this by rebooting the bike again, then, in WiFi settings at the first opportunity, entering a custom SSID and leaving it blank. For some reason, this appears to be the only way to get it to switch from an existing connection. You will need to enter your actual WiFi details again on the member login screen. | If it prompts you to install a firmware update on reboot, you may avoid this by rebooting the bike again, then, in WiFi settings at the first opportunity, entering a custom SSID and leaving it blank. For some reason, this appears to be the only way to get it to switch from an existing connection. You will need to enter your actual WiFi details again on the member login screen. | ||
=== Optional actions === | |||
You can lock the bike to a fixed resistance and use it as a basic exercise bike without smart features. This is useful if you want to start a workout quickly without powering on the bike or adjusting the resistance again after pausing in the middle of a workout. | |||
# Make sure the bike is plugged in. | |||
# Begin pedaling so the bike powers on. | |||
# Turn the resistance knob to your desired level. (It may take a moment for the knob to respond after powering on.) | |||
# Unplug the bike — it will now stay locked at that resistance. | |||
# If you want to change the resistance later, repeat the process. | |||
==References== | ==References== | ||