Classification
Polar M400
|
Classification
|
Grade
|
B
|
Calculator version
|
1
|
Classification date
|
2022-01-25
|
Information
|
Name
|
M400
|
Brand
|
Polar
|
Generation
|
|
Model(s)
|
M400
|
Release date
|
2014-10-21
|
Type/Category
|
Smartwatch
|
Website
|
[1]
|
Status
|
End of sale
|
More
|
Dimensions
|
11.8 x 9.8 x 7.4 cm
|
Mass
|
54.4 g
|
Operating system
|
custom
|
Companion App
|
|
CPU
|
|
GPU
|
|
Memory
|
|
Storage
|
|
Battery
|
190 mAh Li-pol rechargeable battery
|
Power
|
|
Charging
|
usb
|
Display
|
|
Camera
|
|
Sound
|
|
Connectivity
|
micro-USB - bluetooth - GPS
|
Device
|
Criterion
|
Value
|
Proof(s)
|
Comment
|
Known hardware tampering
|
Rare
|
[2] [3]
|
|
Known vulnerabilities
|
None
|
[]
|
|
Prior attacks
|
None
|
[]
|
|
Updatability
|
Rare
|
[4] [ last firmware update in 2019, the app is updated]
|
|
Category score
|
2
|
System
|
Criterion
|
Value
|
Proof(s)
|
Comment
|
Authentication with other systems
|
Full
|
[5] [via the polar flow app or web service]
|
|
Communications
|
Encrypted with up-to-date encryption
|
[6]
|
|
Storage
|
Encrypted with up-to-date encryption
|
[7]
|
|
Category score
|
1
|
User Authentication
|
Criterion
|
Value
|
Proof(s)
|
Comment
|
Account management
|
Absent
|
[]
|
|
Authentication
|
Absent
|
[]
|
|
Brute-force protection
|
Absent
|
[]
|
|
Event logging
|
Partial logging
|
[]
|
|
Passwords
|
Default/Common/Easy to guess
|
[]
|
|
Category score
|
3
|
The watch only store the data during training and isn't always connected with internet. You can sync your data via usb or bluetooth with the Polar Flow app.
It has been shown that it is possible to extract sensitive information from the polar flow app (See
https://www.bellingcat.com/resources/articles/2018/07/08/strava-polar-revealing-homes-soldiers-spies/).
additional links :
https://support.polar.com/e_manuals/M400/Polar_M400_user_manual_English/Content/Technical-Specifications.htm
https://support.polar.com/e_manuals/M400/Polar_M400_user_manual_English/manual.pdf