homeassistant

14912 readers

50 users here now

Home Assistant is open source home automation that puts local control and privacy first.
Powered by a worldwide community of tinkerers and DIY enthusiasts.

Home Assistant can be self-installed on ProxMox, Raspberry Pi, or even purchased pre-installed: Home Assistant: Installation

Discussion of Home-Assistant adjacent topics is absolutely fine, within reason.
If you're not sure, DM @GreatAlbatross@feddit.uk

founded 2 years ago

MODERATORS

GreatAlbatross@feddit.uk

greatalbatross@lemmy.world

334

Voice control is dangerous (infosec.pub)

submitted 1 month ago by Dave@lemmy.nz to c/homeassistant@lemmy.world

36 comments fedilink hide all child comments

This morning my kid asked the voice assistant to "Turn off the computers in this house".

I heard it, thought well that's a strange request but seems harmless because how is home assistant gonna turn off computers.

Me a little while later, "why is shit broken? What's happening!"

Turns out dumb me had adguard exposed to the voice assistant, it switched off all the adguard settings including the DNS rewriting that is the cornerstone of many of my self-hosted services.

I've since revoked that access.

you are viewing a single comment's thread
view the rest of the comments

[–] dan@upvote.au 89 points 1 month ago* (last edited 1 month ago) (17 children)

A while back, I saw a story in the Home Assistant Facebook group about someone's child saying "Hey Google, turn on everything" and it messing things up. I was telling the story to my wife and forgot to replace "Hey Google" with something Google wouldn't pick up on. Oops. It heard my "turn on everything" and chaos ensued. I have some Zigbee alarms that all started sounding. It enabled several different scenes and ran several scripts. All TVs turned on. My Xbox and Nvidia Shield were fighting for control of the TV (there's some issue with HDMI-CEC that I haven't figured out where if both are on, they get stuck in a loop changing the TV input between HDMI2 and HDMI3 about once per second).

Don't do that. "Turn off everything" is bad too. I ~~have~~ used to have my server rack plugged into a smart plug to measure power usage, and "turn off everything" turns that off. I want to figure out how to disable these two voice commands.

[–] Rin@lemm.ee 46 points 1 month ago (10 children)

I just want to point out that i'd highly advise against plugging in your server rack to a smart socket. Those fuckers randomly cycle. Use them for things that are usually off.

[–] blazeknave@lemmy.world 1 points 1 month ago

Or syncing with ohmhour, forgetting, removing physical devices and smart strip, later reusing smart strip for aforementioned server, losing your mind every few days when you notice it went down for no reason but no idea why bc nothing in the software you're running is instructing it to do so.

load more comments (9 replies)

load more comments (15 replies)