125
Smart-homes: The future, or harmful?
(beehaw.org)
What do you guys think of the idea of smart homes? I could make a basic setup using https://home-assistant.io to control my home temperature and lighting; the tools for doing this are everywhere nowadays and implementation doesn't seem too horrific anymore.
But setting aside what I "can" do, is this something that I "should" do? How can a person implement this without connecting any devices to the internet?
Smart homes sound good in concept and I'd love to have one if there weren't so many risks. But an entire home that can be controlled via computers just sounds like an opsec nightmare. Obviously there's the plus that your average technologically illiterate granny isn't going to be using these so it will most likely have strong security systems. But hackers love a challenge.
And a whole neighborhood? A systemwide attack could happen disrupting entire swaths of a city's residential zone. Imagine showers suddenly spraying boiling water, targeted attacks on epileptic individuals with flashing lights, temperatures dropping to below freezing or up to dangerous levels of heat or lightbulbs overloading sending broken glass everywhere, speakers bursting eardrums.
Not to mention more subtle dangers of such voice activation systems being accessed by malicious actors, or more likely, corporate concerns. Someone gangstalked or targeted by powerful people who could just court order one of these smart home companies to hand over the data and they probably will without fuss.
The attack surface of a single electronic device is massive, with dozens of different apps and services, each with different system vulnerabilities to exploit that's already hard enough. But just imagine the attack surface of an entire home! Everything from the LG Flatscreen in your living room, to the temperature control systems, to your Apple Smart Toaster can be hacked to gain access to the rest of the system. If any one of those isn't completely secure (which of course is a pipe dream) then it could be the gateway to a smart home hacking story on a Defcon panel.
And finally, what's stopping the company from just updating the software for your smart home and paylocking features like "Uh yeah, you need to pay 12.99$ a month to have your cctv cameras work." And because all the framework that runs the systems is being hosted in proprietary servers, you can't do shit. And you can't host your own servers either. Does this sound familiar because it should?
To be fair, many of those problems are things you can mitigate by picking the right vendor and staying away from anything that needs to phone home or use the internet
The fact that I buy zwave stuff designed never to connects to the internet
Home Assistant says otherwise
This. I have been slowly building my smart home for the last 4-5 years, and I've yet to have a dead piece of equipment outside of a failed plug-in outlet. Since i do run everything through home assistant, there isn't really any worry on my end up about longer term support, and if something does break in 10 years then whatever, I got 10 years of automation and a fun hobby and I'll just replace it with the switches and shit that I took out to begin with. But because my house is now built around zigbee and home assistant, the only thing I actually have to worry about is HASS going away.
I mean, sure, I'll probably upgrade to other things over time anyway, but that is the nature of technology. I mean, I'm sure these articles have been written but this thread is the equivalent of "laptops - computers are already fine, isn't it just going to be a headache to carry one with you?" Ditto for modern mobile phones.
Yeah, my favorite part is the stability, honestly. I don't have my HA instance facing the internet in any way, only accessible via my Nebula overlay network. No pressure to update the OS regularly or expect that I'm suddenly going to lose features because some big tech company decided they wanted to paywall or disable it in an update.
The fact that I moved earlier this year and was able to bring my whole smart home setup with me, and have it working at the new house before we even had an Internet connection is just golden.