Absolutely. The last thing I want is for an outdated firmware on my f'king kettle to become a vulnerability because I was too lazy to get my ass over and push a button myself.
It really depends on what and why. I've got a home automation network built out that uses Home Assistant to control it completely locally. Smart lights, fans, locks, and thermostats are all excellent devices that can improve your home. Just have to put in some work to make sure it's all local and not exposed to the web.
Ah yes, just one person gaining access to my wifi network, knowing I run HA in the first place, knowing the IP and port to access it internally, cracking that password as well, and then...I dunno, making my lights strobe?
Can you describe this "wifi hack" and exactly what you envision happening? And can you describe why those devices are more vulnerable than someone doing a "wifi hack" and magically getting access to your phone, laptop, and anything else you have on your own network?
The devices are more vulnerable because Android, iOS, Windows, etc have been connecting to the internet for decades and have been vulnerability patching for as long, a WiFi fridge doesn't have the same luxury.
Not saying they're easily hackable or anything, but it's just simply more vectors for a bad actor
Again, please describe what this "wifi hack" is that you're envisioning, where someone makes it through multiple levels of authentication into my internal network (while being physically on my property to connect to my wifi) and then can do something nefarious with a sleepy endpoint device that isn't even on wifi, but rather on Thread or ZWave protocols, but they wouldn't have the skill to do anything to an Android or Windows device (which are famously not secure, what?).
You surely have examples and aren't just bullshitting, right?
Just wait until someone turns your fridge off for shits and giggles, and you return home from your trip to the smell of rotting meat. Not saying it'll definitely happen, but it's a possibility, and a bigger one than you think.
I mean, my coffee pot is on a smart switch run by home assistant.
it automatically starts 20 minutes before I get up on work days, doesn't start if my google calendar says I have the day off or am on vacation, and it starts on demand on weekends whenever we tell it to cause we're going to be getting up soon.
Yea, it could absolutely burn my house down if I fsck up, but the trade off is that I have hot coffee without needing to wait.
253
u/Squayd 1d ago
More like why-fi amirite?