Haier hits Home Assistant plugin dev with takedown notice

Post by SparkyMcUnicorn » Thu, Jan 18, 2024, 8:01 PM UTC

Tomte wrote: post #13

MostlyStable wrote: post #11

Per the one tweet in the article that says they only bought one of these appliances because of the HA plugin: the lesson is don't buy smart devices that have cloud control. Whether or not they have local automation plugins (like HA), or just that have apps/cloud services, expecting those capabilities to remain for the life of the device is a fool's errand. We have a host of examples of cloud services being killed and…

Philips Hue did run locally, and now they are rolling out updates where a cloud account is required.

Post by MostlyStable » Thu, Jan 18, 2024, 8:14 PM UTC

nostrademons wrote: post #40

supergeek133 wrote: post #20

Earlier quoted context omitted.

Home Assistant users are small minority of many of these companies user bases (including ours), and these integrations being locally focused often poll HEAVILY causing an upside down ratio in API traffic compared to all other users. The solution is to allow local interfaces (matter, HTTP, etc) but most company cybersecurity teams just freak out at this. Oh, and the reason we don't have a full time team managing HA is…

Hah, the staff on Assistant working on home integrations measured in the hundreds (I used to work adjacent to those teams). Of course most of them were either laid off or reassigned to other projects, so it's pretty likely that Assistant will stop working soon, if it hasn't already.

Post by MostlyStable » Thu, Jan 18, 2024, 8:16 PM UTC

supergeek133 wrote: post #45

kube-system wrote: post #43

Earlier quoted context omitted.

>local HTTP interface A lot of the worst IoT vulnerabilities in the past have been due to exactly that. 'Local' unfortunately isn't something decided at design time, it's decided when someone connects it to a network. Most people plugging these devices in don't have any clue how to simultaneously secure them and connect them to the internet, so they often end up directly on the internet with default credentials or wi…

Even though I advocate for a local interface, I also completely agree with your statement. But, the alternative is we either accept this completely upside down API traffic ratio with locally focused integrations (bad, costs lots of money) or allow a local interface. Another potential workaround I advocated for was a "cloud down" message that could enable the local interface for those that ONLY go looking for how to d…

Post by antonyt » Thu, Jan 18, 2024, 8:24 PM UTC

MostlyStable wrote: post #53

nostrademons wrote: post #40

Earlier quoted context omitted.

Hah, the staff on Assistant working on home integrations measured in the hundreds (I used to work adjacent to those teams). Of course most of them were either laid off or reassigned to other projects, so it's pretty likely that Assistant will stop working soon, if it hasn't already.

Hold up....Home Assistant staff has been recently cut in a way that you think the entire thing is likely to stop working in the near future? That is a very major claim to be making. If that's true (or even plausible) it's a very huge deal. Is there anywhere I could read about any of that? -edit- also I'm either misunderstanding your comment or learning something very major about HA. I didn't realize it was a cohesive…

Post by MostlyStable » Thu, Jan 18, 2024, 8:24 PM UTC

supergeek133 wrote: post #56

MostlyStable wrote: post #53

Earlier quoted context omitted.

Hold up....Home Assistant staff has been recently cut in a way that you think the entire thing is likely to stop working in the near future? That is a very major claim to be making. If that's true (or even plausible) it's a very huge deal. Is there anywhere I could read about any of that? -edit- also I'm either misunderstanding your comment or learning something very major about HA. I didn't realize it was a cohesive…

I'm guessing when they're saying "Assistant" they're talking about Google. Not HA.