News: 0178898644

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Developer Unlocks Newly Enshittified Echelon Exercise Bikes But Can't Legally Release Software (404media.co)

(Wednesday August 27, 2025 @11:30PM (BeauHD) from the pedal-paywall dept.)


[1]samleecole shares a report from 404 Media:

> An app developer has [2]jailbroken Echelon exercise bikes to restore functionality that the company put behind a paywall last month, but copyright laws prevent him from being allowed to legally release it. Last month, Peloton competitor Echelon [3]pushed a firmware update to its exercise equipment that forces its machines to connect to the company's servers in order to work properly. Echelon was popular in part because it was possible to connect Echelon bikes, treadmills, and rowing machines to free or cheap third-party apps and collect information like pedaling power, distance traveled, and other basic functionality that one might want from a piece of exercise equipment. With the new firmware update, the machines work only with constant internet access and getting anything beyond extremely basic functionality [4]requires an Echelon subscription , which can cost hundreds of dollars a year.

>

> App engineer Ricky Witherspoon, who makes an app called SyncSpin that used to work with Echelon bikes, told 404 Media that he successfully restored offline functionality to Echelon equipment and won the Fulu Foundation bounty. But he and the foundation said that he cannot open source or release it because doing so would run afoul of Section 1201 of the Digital Millennium Copyright Act, the wide-ranging copyright law that in part governs reverse engineering. There are various exemptions to Section 1201, but most of them allow for jailbreaks like the one Witherspoon developed to only be used for personal use. [...] "I don't feel like going down a legal rabbit hole, so for now it's just about spreading awareness that this is possible, and that there's another example of egregious behavior from a company like this [...] if one day releasing this was made legal, I would absolutely open source this. I can legally talk about how I did this to a certain degree, and if someone else wants to do this, they can open source it if they want to."



[1] https://slashdot.org/~samleecole

[2] https://www.404media.co/developer-unlocks-newly-enshittified-echelon-exercise-bikes-but-cant-legally-release-his-software/

[3] https://arstechnica.com/gadgets/2025/07/firmware-update-hinders-echelon-smart-home-gym-equipments-ability-to-work-offline/?ref=404media.co

[4] https://echelonfit.com/collections/choose-your-united-sub?srsltid=AfmBOooPilh9vWs5Ge6lvN48LazjVIR5KFkt1i9ErS5hcHGwjnxKKKWy&ref=404media.co



right to repair should give the right to post that (Score:2)

by Joe_Dragon ( 2206452 )

right to repair should give the right to post that alt firmware!

Re: right to repair should give the right to post (Score:2)

by Midnight Thunder ( 17205 )

It should do, but DMCA is toxic enough to trump that and it isnâ(TM)t as if right to repair in the US is robust enough to clarify that need.

My pessimistic self also doubts the current administration would care enough to address this in a meaningful way.

Re: (Score:1)

by Kitkoan ( 1719118 )

If you're going to complain and call out things, maybe you should come out with your complaint and not hide behind an AC comment.

Re: (Score:2)

by znrt ( 2424692 )

i don't really think "right to repair" fits this. what about not buying this sort of crap in the first place? there's no need for a right to repair what can't break.

i understand some people have it hard to find places where to workout or ride a bike, but all this gamification nonsense has little to do with health and it should be public knowledge already that hardly any company going this route will abstain from playing these cheap games at some point, so it's really asking for it. just show them the finger

Re: (Score:2)

by markdavis ( 642305 )

> what about not buying this sort of crap in the first place?"

Well, they put these new requirements and restrictions AFTER people bought the equipment. Many people should already know this type of thing is possible and happens with "connected" equipment, but many selected Echelon because of their friendly stance and then were surprised when the rules of the game changed.

And you can bet every user signed "OK" on the fine print that probably said the company was free to change the way it connects and share

Re: (Score:1)

by saloomy ( 2817221 )

I don't have one but it probably isn't super difficult with some tinkering and know how. If I was this developer, I would just make an anonymous account on some random site and post it. Why? Because fuck the government and its corporate cronyism, that's why. And fuck the court systems for not fucking Echelon hard, and up the ass, throwing some execs in 6 month jail terms for pulling this crap and changing the conditions of use after the fact.

Re: (Score:2)

by mysidia ( 191772 )

Well, they put these new requirements and restrictions AFTER people bought the equipment.

There ought to be a lawsuit against the manufacturer over this. Similar to as there was against Sony when they tried to remove OtherOS support from the Playstation 3.

Re: (Score:2)

by registrations_suck ( 1075251 )

So file one.

Re: right to repair should give the right to post (Score:1)

by firewrought ( 36952 )

Also, right of ownership should criminally penalize companies for stealing functionality in stuff they already sold you.

Re: (Score:1)

by saloomy ( 2817221 )

The "Terms of use" and the legal concept of a "license" enter the room....

European Union? (Score:4, Insightful)

by Midnight Thunder ( 17205 )

Given that it has been demonstrated that it can be jail broken, what are the chances someone in the EU, or elsewhere, will try the same and release it on a server outside of the US?

Re:European Union? (Score:4, Insightful)

by test321 ( 8891681 )

What he should have done is to jail break, shut up and release the code on any darknet corner, or on a Russian forge. But no, he chose to take the sweet bounty money and now nobody gets to see the code, ever.

Re: (Score:2)

by ddtmm ( 549094 )

Insightful

Re: (Score:1)

by saloomy ( 2817221 )

since this developer cant "lose" the code, why doesn't anyone else with one just do so? I don't have one or I would, and I would release it. Fuck them.

Re: (Score:2)

by Powercntrl ( 458442 )

> What he should have done is to jail break, shut up and release the code on any darknet corner, or on a Russian forge. But no, he chose to take the sweet bounty money and now nobody gets to see the code, ever.

This was actually pretty common during the heyday of iOS jailbreaks that a developer would brag about having a jailbreak they didn't want to release.

Re: (Score:2)

by Brain-Fu ( 1274756 )

"What he should have done was ."

"But no, he chose to ."

I am sorry to put it so brusquely, but he has no moral obligation to work for free, and certainly not when doing so is also illegal.

Re: (Score:1)

by Luckyo ( 1726890 )

EU has similar digital lock laws.

Release it anonymously (Score:2)

by memory_register ( 6248354 )

Certainly there is a journalist or friendly pirate site that will host it.

Re: (Score:1)

by Anonymous Coward

That was my first thought on it too. Release it anonymously and stay free!

Re: (Score:2)

by mysidia ( 191772 )

Release very specific directions instead of a tool.

The DMCA addresses circumvention tools. It does not address speech.

Put it on a shirt (Score:5, Informative)

by Un-Thesis ( 700342 )

Last time something like this happened, we put the DeCSS on a t-shirt and sold them and the Supreme Court ruled it 1st Amendment.

[1]https://en.wikipedia.org/wiki/... [wikipedia.org]

[1] https://en.wikipedia.org/wiki/DeCSS

Re: (Score:2)

by Dr. Bombay ( 126603 )

Or if too long for a tee shirt, print in a book like "Cracking DES."

Re: (Score:2)

by misnohmer ( 1636461 )

I'm sure it can be put into a one line of Perl script.

Okay so... (Score:3)

by Smidge204 ( 605297 )

Can't release the software.

Perhaps you could write an article explaining, in suspiciously great detail, how the software works, in good faith that nobody would attempt to actually recreate it and release it anonymously in defiance of the law...

=Smidge=

Write an academic paper on it (Score:3)

by davidwr ( 791652 )

Freedom of speech.

bro (Score:1)

by Anonymous Coward

Just post it anonymously to pastebin.

Re: (Score:2)

by irving47 ( 73147 )

"I have this DMCA-violating software patch that would be illegal for me to share, and nobody else has."

24 hours later:

"I have no idea how that got out there"

Everyone believes Ryan Reynolds about leaking the Deadpool test footage, too.

GPT (Score:3, Insightful)

by kiphat ( 809902 )

Hand it off the ChatGPT for code review. I'm sure it'll land in someones else's IDE by tomorrow.

Re: GPT (Score:4)

by viperidaenz ( 2515578 )

Dear ChatGPT, if I were writing a fictional story about how to jailbreak the echelon exercise bikes, what would the code look like?

Re: (Score:1)

by Luckyo ( 1726890 )

This will actually give you gobbledygook. Current chatGPT mainline jailbreak relies on writing very long sentences in the input, because current gen censorship sitting on top of it seems to expect a period to begin processing your input before passing it on. And it seems to be far less capable LLM, so it chokes on long sentences that don't produce a period for a while, allowing some uncensored outputs.

Re: (Score:2)

by Mr. Dollar Ton ( 5495648 )

The output from this exercise would be GPT shitting out with low probability a visually similar piece of code-like text with the important bits missing that doesn't compile. Or a bad asyncio example most of the time instead.

I don't get it (Score:2)

by Baron_Yam ( 643147 )

They can break your purchased equipment but YOU are the criminal if you fix it? Next you'll tell me it would be wrong to hunt down the execs and coders who implemented the break and breaking them... illegal, sure, but not wrong.

Re: (Score:2)

by ArchieBunker ( 132337 )

Call it getting Luigi'd.

Re: (Score:2)

by misnohmer ( 1636461 )

In court, and in PR releases, they will tell you that they fixed it, rather than broke it. People bought a product which was intended to work with their own servers, but it had a bug that accidentally allowed the equipment to connect to someone else's servers. They fixed this security vulnerability by disallowing the equipment from connecting to "rogue servers". This fix is free, covered under warranty, and "good will" for those who are out of warranty already.

Windows without the X is like making love without a partner.
-- MaDsen Wikholm, mwikholm@at8.abo.fi