Tidbyt

Security Grade

Calculator v

Tidbyt

   Brand: Tidbyt (Parent: Tidbyt, Inc.)

   Category: Smart Display • Model / Gen: 1 Walnut, Beech

   Release Date: 2022-04-01 • Status: In sale

   Classification Date:  • Official Website

Security Evaluation

Criterion	Value	Proof	Comment
Known hardware tampering	None	🔗 Proof	The device is housed in a sealed wooden enclosure and is not user-serviceable. No public reports of supply chain tampering.
Known vulnerabilities	Rare	🔗 Proof	Runs a single-purpose, minimalist firmware. The attack surface is extremely small as it only communicates with Tidbyt's official servers. All updates are pushed via OTA.
Prior attacks	None	🔗 Proof	No publicly documented security breaches targeting the Tidbyt platform or devices.
Updatability	Very common	🔗 Proof	The device automatically receives mandatory Over-the-Air (OTA) firmware updates from Tidbyt's servers to add features and apply security patches.
Category Score	Score: 2 / 3

Criterion	Value	Proof	Comment
Authentication with other systems	Full	🔗 Proof	The device authenticates securely with Tidbyt's cloud infrastructure over Wi-Fi to receive applet data and commands.
Communications	Encrypted with up-to-date encryption	🔗 Proof	All data transmitted between the device, the companion app, and Tidbyt's cloud servers is encrypted in transit using TLS.
Storage	Encrypted with up-to-date encryption	🔗 Proof	The device itself stores minimal data. User account information and applet configurations are stored securely and encrypted at rest on Tidbyt's servers.
Category Score	Score: 1 / 3

Criterion	Value	Proof	Comment
Account management	Full	🔗 Proof	A Tidbyt account is mandatory for device setup and management, all handled through the companion smartphone app.
Authentication	Secure	🔗 Proof	Authentication is handled by the cloud-based Tidbyt account, which supports standard email/password as well as SSO with Google and Apple.
Brute-force protection	Exist	🔗 Proof	Tidbyt's cloud account system includes standard server-side protections against brute-force login attacks.
Event logging	Access event logged	🔗 Proof	Comment: Account login and access events are logged server-side for security and auditing, as is standard practice.
Passwords	Require change after setup with complexity requirements	🔗 Proof	The Tidbyt account creation process enforces standard password complexity rules.
Category Score	Score: 1 / 3

Property	Details
Operating System & App	Proprietary firmware (Companion App: Tidbyt)
Hardware (CPU / GPU)	CPU: • GPU:
Memory & Storage	Memory: • Storage:
Power, Battery & Charging	Battery: • Power: • Charging:
Display & Camera	Display: • Camera:
Sound & Connectivity	Sound: • Connectivity:
Physical (Dimensions & Mass)	Dimensions: 208 x 112 x 51 mm • Mass: 680 g