Tech worker here. My house is largely smart, but it’s all controlled by a local server.
Cybersecurity tech worker here, and same. Even with the local server though, the one smart thing that I absolutely don’t fucks with is exterior door locks. I got one that does PIN entry, but absolutely no wireless or Bluetooth or anything. Other than that let’s fucking go it’s 2024 I can’t be bothered to open my window shades with my hands like I’m living in the 1800s on a farm in the fucking prairie or some shit. They open on a schedule, synced at a slightly earlier offset to my wake up alarm.
Eh if they are savvy enough to unlock my door they are smart enough to break my window. Also if they can unlock my door I still have zwave open/close sensors that will trigger the alarm so I will take the convince of smart locks over non smart any day. I can keep the wandering bums out but remotely let family members in without having to give out my code or keys.
That’s fair. I can store like 20 codes or something, so I just keep one extra in there then rotate it after whoever I had to give it to is done with needing it.
I live on a really busy street in a city, so I’m really not worried about someone breaking a window to get inside. Sure there’s a nonzero chance a methie might smash a window, but around here it’s mostly just testing car door handles and maybe smashing the car window if there’s a visible wallet or pill bottle or something.
Walking up to my door and doing a replay attack, or sending a master password to the lock takes seconds and doesn’t look any more suspicious than a resident entering the house. This talk is from 2016, but I doubt things have gotten significantly better, and I don’t want to be replacing my door lock, or even worrying about updating firmware, whenever something like this is found (Picking BLE Locks - Anthony Rose & Ben Ramsey).
But yeah, I’m not saying anyone’s an idiot for using a smart lock or anything, odds are it will never matter either way.
Dream: I will slowly wake up to gently increasing morning sun
Reality: my alarm clock sound is now just the buzzing and whirring of a motor that is starting to open my blinds. Just as I fall back asleep the whirring noise starts again to increase the light level.
I wish someone made a smart door lock status indicator. I don’t want my doors to unlock for me; I just want to know if I remembered to lock them.
Like you want to have a dumb lock but a smart sensor that tells you if the deadbolt is locked or open?
I remember reading some blog somewhere about a person who rigged up a sensor to alert them if their mailbox had been opened or not, you could probably design something to do similar. Idk maybe a magnetic thing to detect the bolt itself, or something to detect on the position of the latch on the interior of the door?
Found this after a quick search, sorry for it being Reddit and the video of the working solution being uploaded to gfycat.
HomeAssistant can do this. Set an automation when you leave your home zone, if door is unlocked notify you.
If you have a smart lock, you can even close it. You should get cameras and an alarm system first, though.
Yep fully agree on the exterior door locks. That is the one thing that should never be connected to anything even local servers. Also have to be careful with electronic locks in general. Some brands are terribly designed and can be bypassed in a stupidly easy way.
I’m more of a middle-ground person myself. I have Home Assistant fully self-hosted and using a secure cloudflare tunnel for external access. A few other self-hosted containers running other various things. Anything exposed to the internet requires a login. I always try to find stuff that integrates with HA, but I don’t go to the full length of finding stuff that doesn’t require the brand app to setup. I like the local control stuff if I can get it, because it usually works a lot better, but I won’t actively avoid every brand that connects to a cloud somewhere because that’s too much effort to avoid for me.
Shades? A real tech enthusiast uses PDLC Film!
(Seriously, I wish I could afford some for all my windows.)
Build your own! All you need is an esp32 or pi pico, stepper motor, and driver.
That’s next on my list of projects after I finish my smart microchip keyed pet feeding stalls.
I really hate that the automated shades I needed (must be plug in because they’re 18’ off the floor) are so proprietary that it’s not even wifi.
There are Somfry blind controllers with small solar panels that face outwards on the motor housing. No plug required.
I would assume those would be zigbee or z-wave or something. What does it use?
Damn that sucks. I lived in an apartment and wound up rigging up an arduino to pull the chain on these three massive window shades in my apartment, they were seriously like 20 foot tall windows. This was back in 2015 or so, so I didn’t even bother trying to find anything off the shelf.
I love your username btw.
Personally I love the idea of a smart home only if its self hosted and running on fully open source software, also never put a gun near an unattended printer :3
Zwave is superior for not clogging up the 2.4GHz airspace, both are darling to use with hass. Wifi is a close third for usability but suffers from bogging local wifi/airspace without interoperability without a controller of some kind being online. Zigbee/Zwave both can function somewhat even with the local server offline
Home assistant, as a central system (it basically let’s you wire anything into anything!). The smart switches etc should be esp8266 or esp32 based. You can then flash either tasmota or esphome to them.
Since your server will likely be Linux based, it’s open source all the way to the bare metal, (or at elast as close as possible).
My current system almost doesn’t notice if the Internet dies. Also, if you nuke critical components, in the worst case, it still defaults to dumb control behaviour (physical switches still work etc).
I still know where the kill switches are however. I’ve also made sure it doesn’t have control of anything mobile, other than the robo vacs, and I’m fairly sure I could take them in a fight.
as close as possible [to fully open source to the metal]
Last I checked the only fully open stuff is one manufacturer’s IBM power 9 workstation and several Chromebooks
Is it better in embedded stuff? Last openWRT device I ran needed a closed binary for network
There’s still some various binaries. E.g. the expressif sdk generated code. However, it’s far harder to sneak something nasty into it.
Codespace is at an extreme premium on microcontrollers. Kb, and even bytes matter. A big, complex bit of malware would take significant space, likely enough to be noticed quickly.
As for smaller, simpler malware, this is a possibility. However, due to their nature, microcontrollers get a lot more scrutiny of their outputs. Random data dumps to an unexpected external address would be caught VERY quickly.
This is compounded by the fact that it’s not uncommon, at least in larger installs, to segregate IoT devices from the main network. It stops them cluttering it up, and slowing it down. This makes it easy to firewall off the network from the Internet. They can talk to each other, and the central coordinator, but only the coordinator can see the internet, unless explicitly allowed.
If my network were compromised via my smarthome setup, my first suspects would be the debian PC running home assistant, or my ubiquiti router. I’ve at least reduced my target area to business grade networking kit and a single Linux server. I’m not an impossible target, but far from a soft one.
I’m horrified when I see someone with an Alexa in their home
Yup, my parents have Google Home and Alexa, and my brother has Alexa. And here I am, the only one in the family who works in tech with neither. In fact, I got a free Google Home and gave it away because I don’t want it anywhere near my home network.
One of these days I’ll figure out how to DIY it, but until then, I just use my phone (GrapheneOS, so some protections there) to play music and look stuff up.
With a bit of work homeassistant can be a quite good voice assistant.
You can either revive some old android device and use that, or get an ECHO M5 for ~13€ and hook that one up.
You can even run some local Ollama AI and use that for the voice assistant nowadays. It’s quite useful and home assistant can be integrated into music / audiobooks aswell with something like Music Assistant 2.0
I’ve been meaning to set up a voice assistant with Google’s old AIY voice kit and Mycroft for a long time now (so long, in fact, that at the time I started thinking about it those things hadn’t been discontinued yet) and then trying to integrate that with Home Assistant. (See also: Picroft, Mycroft Home Assistant integration)
If I still wanted to use that voice kit hardware, what would be the best software to put on it these days?
There is www.home-assistant.io but that might be too much for your needs.
I like having something in the garage. It’s in a place where I only stay when I’m working on something and my hands are super dirty. It can be isolated to a vlan by itself.
But if my hands are covered in oil. I like being able to yell at it to play music and not get one more thing dirty.
Makes sense. I’m also interested in getting something like it, I just don’t want anything by Google or Amazon, and I’ve been too lazy to go the DIY route.
When I’m working in my garage, I’m usually listening to an audiobook, and all I need to do to pause is bump a button on the side with the back of my hand or something. Or sometimes I’ll listen to a playlist. But if I’m working on something in the garage, it’s usually not for very long (e.g. maybe an oil change, brake job, or headlights), so I’m usually in and out in 30 min to an hour. Some people love working in their garage though, I personally see it as a chore that I do to save some time and money.
I got a free Google Home and gave it away
To an enemy, I hope! Otherwise, you should’ve just thrown it out, or stripped it for parts or something.
I got a free Google Home and gave it away because I don’t want it anywhere near my home network.
You should have destroyed it.
That’s bullshit. No one really does keep a gun next to their printer to shoot it in an emergency, the notion is just ridicolus.
What if the printer grabs the gun first? You need to keep it out of reach of the printer.
My printer sits on an activated trapdoor above a shark tank. I’ve spent so much on printers trying to learn all the normal noises. Also sharks, turns out ink in the tank is not great for them.
I refuse to buy products for my home that require an app. No, I am not signing your fucking privacy policy to use my lightbulbs.
When I had my bathroom done, they put some speakers in the ceiling I could connect to with bluetooth, but in order to activate that I need to use a crappy app to swap them to speaker mode and turn them on.
When I got a new phone, guess which app no longer works on versions of Android that Noah himself didn’t use to track his fucking animals?
Bonus: Every power cut causes it to enter “detuned radio mode”, requiring me to find my old phone, charge it up enough to power on, connect to the speakers and switch them off.
Never buy anything from EISSound.
Really need to get around to figuring out the spec of the speakers so I can replace the controller…
See, this guy is not a programmer, you should have known to create a ubiquitous interface to use your speakers, some audio cable that you could connect to any device to implement the music playing capabilities, instead you jammed the implementation into a blackbox that now can’t be easily changed.
