CondorWonder

joined 2 years ago
[–] CondorWonder@lemmy.ca 4 points 1 month ago

I use an acurite 06002RM temperature and humidity sensor with a rtl 433 compatible receiver plugged into home assistant and an rtl2mqtt add on. It’s indoor/outdoor and has worked well for all sorts of weather. Combined with a sun shade and it’s a good solution I think, and completely local.

[–] CondorWonder@lemmy.ca 4 points 1 month ago

I think it’s not quite as well known or prevalent as other services (as say SSH) so likely doesn’t have anything automated attacking it yet. If you check something like http://shodan.io/ against your ip, I’d guess the service has been found.

Home Assistant likely won’t come under any kind of attack until there’s a very easy to exploit, unpatched zero-day vulnerability in the wild. Given how many people (myself included) who have HA exposed publicly it’s really a matter of time. The best mitigation is not exposing publicly if possible, and staying up to date.

In my case I don’t expose HA over 8123, I have a proxy on 443 where HA is not the default host name, meaning if you don’t use the right host HA doesn’t receive the traffic. As I’d expect that automated attackers wouldn’t what my host is it’s a reasonable layer in the security onion. I don’t expect anything would realistically protect from a targeted attack but I’m also not important enough to be targeted.

[–] CondorWonder@lemmy.ca 4 points 1 month ago* (last edited 1 month ago) (1 children)

You don’t need cards to have full bandwidth, they only time it will matter is when you’re loading the models on the card. You need a motherboard with x16 slots but even x4 connections would be good enough. Running the model doesn’t need a lot of bandwidth. Remember you only load the model once then reuse it.

An x4 pcie gen 4 slot has ~7.8 GiB/s theoretical transfer rate (after overhead), a x16 has ~31.5GiB/s - so disk I/O is likely your limit even for a x4 slot.

  • overhead was already in calculations
[–] CondorWonder@lemmy.ca 67 points 1 month ago (7 children)

We can’t ever stop this kind of stuff, but with something like fail2ban you can set it up to block on too many failures.

Really though - ensuring your system is kept up to date and uses strong passwords or use a SSH keys is the best defence. Blocking doesn’t prevent them from trying a few times. Moving SSH to a non standard port will stop most of the automated attacks but it won’t stop someone who is dedicated.

[–] CondorWonder@lemmy.ca 1 points 3 months ago (1 children)

Check out this device. I have several and they work well. Zigbee temperature sensor in a cabled probe.

[–] CondorWonder@lemmy.ca 1 points 3 months ago (1 children)

I use HASS.agent to help manage my Windows desktop and expose various sensors to HA. It can suspend or hibernate the system. It does use MQTT as its connectivity plane.

[–] CondorWonder@lemmy.ca 4 points 3 months ago

EasyDNS is Canadian based out of Ontario. I only use them for email and dns personally but they do web hosting also.

[–] CondorWonder@lemmy.ca 5 points 4 months ago (1 children)

Yes I simplified. Some(? I’d hope all but probably not) new fobs do turn off (ignore the car broadcast) if they are not moved for a time. I proved this to myself with my 2020 car by putting my keys down by my car door, I could only unlock the car for a minute or two after I put it down, after that keyless entry didn’t work until I disturbed the fob to wake it up.

This is to mitigate the relay attack at home (and I’m sure other times, like if the key is in a purse), one avenue was that attackers would count on people hanging their keys by the door, so accessible to selective standing on the stoop with a relay. By turning off at rest they can’t be exploited this way.

[–] CondorWonder@lemmy.ca 11 points 4 months ago (3 children)

Older fobs never turned off - so they are constantly broadcasting the signal for the car. Newer fobs do turn off when at rest so they’re less risky, but if say it’s in your pocket it’s constantly moving so someone could still relay it to steal your vehicle, assuming they get close enough to you.

The faraday bag is good for older fobs or if you think you’re at risk of a key relay attack.

[–] CondorWonder@lemmy.ca 2 points 4 months ago

I have a bunch of Tuya and Aqara buttons from AliExpress and I’m happy with them. I haven’t found anything similar on Canadian Amazon at least.

2,4,6 button variants of https://www.zigbee2mqtt.io/devices/WXCJKG11LM.html#aqara-wxcjkg11lm

4 button https://www.zigbee2mqtt.io/devices/TS004F.html#tuya-ts004f

[–] CondorWonder@lemmy.ca 3 points 6 months ago (2 children)

You’ll need to use | float(0) in templates. All state values and attributes start out as strings. Also setting a default value in the float(#) cast will ensure templates don’t break when the value is invalid.

That means use this style: {{ state\_attr("light.kitchen\_sink\_ceiling", "brightness") | float(0) }}

[–] CondorWonder@lemmy.ca 4 points 6 months ago (1 children)

We need more information to recommend anything. Do you need high voltage switching? Do you have zigbee, zwave, or only wifi available? How much integration or local on device control do you actually want or need?

view more: next ›