this post was submitted on 02 Feb 2026
143 points (99.3% liked)

homeassistant

18167 readers
215 users here now

Home Assistant is open source home automation that puts local control and privacy first.
Powered by a worldwide community of tinkerers and DIY enthusiasts.

Home Assistant can be self-installed on ProxMox, Raspberry Pi, or even purchased pre-installed: Home Assistant: Installation

Discussion of Home-Assistant adjacent topics is absolutely fine, within reason.
If you're not sure, DM @GreatAlbatross@feddit.uk

founded 2 years ago
MODERATORS
 

I'm choosing devices based on how good they work with zha and HA and usually have to browse a bit before settling for something. If they manage to implement this properly, I'm all here for it.

Maybe they should talk to the zigbee device compatibility repository people (or maybe they already have).

you are viewing a single comment's thread
view the rest of the comments
[–] cynar@lemmy.world 2 points 1 day ago (1 children)

If you're trying to fend off the CIA then your worries have merit. My goal is to limit casual data leaks and bypass attacks.

Normal worst case, someone can see when I turn lights on and off. Or mess with my thermostats. There are easier ways to gather that info.

Can you actually back up any of those statements, particularly when we are dealing with things like ZigBee, tasmota, or espHome?

[–] hector@lemmy.today -1 points 1 day ago (1 children)

Oh idk about vulnerabilities being limited to sophisticated actors like the nsa in the us or the five eyes countries that give an end run around prohibitions on spying on their own citizens purportedly leading spying in member country then sharing it back with them, even when it's cia doing all the spying and just forwarding it to the uk and back with a letterhead.

Corporate interests themselves have vulnerabilities written into everything. Palantir type companies, a bunch of super shady Israeli companies that repurposed the most malicious codes ever written, written by our intelligence agencies to target Iran and the like, (flame, others,) to spy on computers, phones, and everything connected.

But also just data brokers in general are hooked into data flows those manufacturers said they weren't taking and ineviably are caught taking anyway because who is going to stop them, and what are they going to do about it when they find out? And the answer is if some do gooder catches them and forces the authorities to act, they will just have to pay lawyers to negotiate a payoff to the government without admitting responsibility, and are mostly insulated from consumer lawsuits anyway as ToS agreements force all of their purchasers to waive their rights to sue in using those products. You are also criminally liable for changing the code on any of them, or even breaking any electronic "lock," on any of the electronics.

So if there was a vulnerability and you publicized it and a how to fix the software the feds could charge you with a serious felony. Based on some 1998 law to protect cd companies, and I think a newer law as well.

Back up what statements? That corporations spy on us and can't be trusted? And to suggest that surrendering even the capability for everything you do to be garnered by hackers in addition to just accepting the nsa and cia wil get their hands on it and run it through ai threat detection and then disseminate their half baked conclusions to agencies and business secretly in a way that will affect everything but you will never know or be able to challenge, is a threat whether you realize it or not. Social credit scores run by palantir types but not at all limited to them. Privatized social credit scoring at that, owned by the antichrist himself.

[–] cynar@lemmy.world 4 points 1 day ago (1 children)

We are in a forum talking about Home Assistant, an open source piece of software, aimed at patching over the annoyances and games the various companies you are complaining about play.

It lets you control them all from one piece of software, so you don't need 20 apps on your phone, and the spying they support. It also lets you isolate the devices on their own vlan, cut off from the internet completely. All control then goes through software under our control.

The database it's talking about is basically a scoring of how nicely the various devices play once you have deloused and neutered them.

It's a community attempt to fight back against big data etc. This is why you are being down voted hard. You're interrupting with a rant about the very thing we are fighting.

[–] hector@lemmy.today -2 points 1 day ago (1 children)

I don't care about downvotes. That is interesting, my point that it's better to not have internet capable appliances in the first place is valid, as well as the point that you can only minimize the potential to be spied on not eliminate it, I would strongly presume the NSA has a backdoor for instance. Suspect the manufacturers have ones too. Possibly fusible links to brick them all to boot, as is rumoured.

But it's good to minimize the danger if you insist on having them, and with phones and computers we all do now. The post would garner more engagement and less such flak if it just explained that in the post page and not assume everyone s a linux developer

[–] cynar@lemmy.world 2 points 1 day ago

Or you could realise you are in a group focused on a single bit of software and do a 5 minute investigation into said software.