Technology

Smart homes sound good in concept and I'd love to have one if there weren't so many risks. But an entire home that can be controlled via computers just sounds like an opsec nightmare. Obviously there's the plus that your average technologically illiterate granny isn't going to be using these so it will most likely have strong security systems. But hackers love a challenge.

And a whole neighborhood? A systemwide attack could happen disrupting entire swaths of a city's residential zone. Imagine showers suddenly spraying boiling water, targeted attacks on epileptic individuals with flashing lights, temperatures dropping to below freezing or up to dangerous levels of heat or lightbulbs overloading sending broken glass everywhere, speakers bursting eardrums.

Not to mention more subtle dangers of such voice activation systems being accessed by malicious actors, or more likely, corporate concerns. Someone gangstalked or targeted by powerful people who could just court order one of these smart home companies to hand over the data and they probably will without fuss.

The attack surface of a single electronic device is massive, with dozens of different apps and services, each with different system vulnerabilities to exploit that's already hard enough. But just imagine the attack surface of an entire home! Everything from the LG Flatscreen in your living room, to the temperature control systems, to your Apple Smart Toaster can be hacked to gain access to the rest of the system. If any one of those isn't completely secure (which of course is a pipe dream) then it could be the gateway to a smart home hacking story on a Defcon panel.

And finally, what's stopping the company from just updating the software for your smart home and paylocking features like "Uh yeah, you need to pay 12.99$ a month to have your cctv cameras work." And because all the framework that runs the systems is being hosted in proprietary servers, you can't do shit. And you can't host your own servers either. Does this sound familiar because it should?

I've been using Home Assistant for a while now. I do recommend setting up a VLAN that can't communicate with the internet which is where any wifi devices live. However I really like ZigBee and/or Z-Wave devices as they don't require any internet connection.

Lights alone are a game changer. Timers never really worked well for us because we're pretty far north of the equator and sunrises/sunsets have a pretty big swing. I currently have the lights come on 1 hour before sunset so it adjusts to this swing without me having to do anything. Then I have a button on my nightstand that turns off all the lights that aren't night lights.

The downsides are that it can be expensive. You start with a couple of light bulbs, maybe a couple of outlets, next thing you know you are pricing out how much it will cost to change all your switches and trying to figure out if they all have neutral wires or not. You'll start watching youtube videos of people's setups and looking for ways to do more with your smart home. It's a fun hobby but can be a lot of work.

Smart homes in centralized hands, such as Google? Nightmare.

Smart homes controled from your home, like home assistant? Awesome. I have home assistant and done some lights, water sensor, even my security cameras. It's a lot of work, but it works so well it's crazy.

Just remember, the S in IOT stands for security.

I do have some IOT devices on my network, however they are kept off the internet and on their own vlan. No phoning home (or anywhere else) for these devices.

They can be great if they are set up properly, but too many people just take them out of the box, toss them on their network and think they are just fine.

As others have said, you can sequester IoT devices to a VLAN that has no internet access. Most of the common devices (lights, switches, sensors) added to smart homes work perfectly fine without access to the internet. Voice assistants are the biggest security/privacy hole since all commercial options are from big tech companies and phone home constantly. If you set up a local homeassistant instance you can get a ton of functionality out of smart devices with no direct connection to the internet. You need to decide how you handle accessing homeassistant from outside your home if that's something you want but there are plenty of options to choose from for that.

One thing I will say that I refuse to add to my home is any kind of smart locks. No matter how much I trust my security setup, I don't trust it with the ability to unlock my doors. If there was one that could only lock them electronically but required being manually unlocked, them maybe. But I haven't seen a lock like that out there.

I've been using smarthome stuff for quite a while now, and my conclusion is this:

• You absolutely have to stay local. Home Assistant is the only software I know that can pull that off at the moment, but never ever use commercial devices that have to talk to their servers. Once the servers are down or your internet connection is down, those devices are just bricks, and you don't want that at home.
• The setup is only really usable by the person who set it up. If you're living alone that's fine, but anybody else will have a hard time tapping in your secret code to turn on the lights. All trained behavior like pushing a light switch to turn the lights on and off are violated in a smart home, even if it's just because the delay between pushing the button and the lights going on is increased by 100ms.
• You have to monitor battery levels of sensors and replace them to keep the system working. There are dozens of coin cells in your home, they are going to run out eventually (after a few months).
• Have a fallback mechanism when the network goes down. It's not great when you can't turn on the lights to check why the WiFi router isn't responding.

The rate at which the go obsolete is my issue. If you invest in a system, just be prepared to replace everything every five years, and there is almost nothing yoiu can 'fix'...it is all disposable.

Smarthome well done is good and I think it will be necessary to tackle some challenges of the future - we need smart solutions to use ressources much more efficiently.

But: 85% of all smart home products are neither smart nor good. They are glorified remote controls. Nothing more.

AMAZON ALEXA IS NOT A SMART HOME PRODUCT.

A smart house doesn't need you to use your phone/voice/etc. to turn down the blinds or switch on a light. It knows when the blinds need to be where depending on your location, the weather (blind based cooling in summer, heating in winter), the time, etc. It inherently doesn't need a internet connection to control itself - it only does need the internet to expand its knowledge of the outside world,e.g. by getting disaster alerts, weather forecasts or off-site-location. When done this way there isn't much "hacking" that can be done. There aren't many components that can turn into botnets.

This is all possible for ages and it is all easily achieved - KNX and other systems are good examples. Matter can possibly achieve that. But currently it's the big hype to call everything that can be voice controlled smart.

For fucks sake. It takes me longer to say "Alexa turn on the living room lights" than to do it myself or use a Clapping sensor from the 80ies.

If you're smart about it, doing home automation can be really rewarding and useful. Automating lights to turn on when it gets dark is probably the most useful thing. I also have a window fan to bring in cool night air, which automatically clicks off at 60°. All of this runs locally on a raspberry pi via home assistant and z-wave, no sus devices on my network!

I have a smart home. I run Unraid OS on my server and among a ton of dockers, I run my own VM with home assistant. Been doing my own DNS, network wide ad blocking, media server, home automation stuff for years now. Always will to help answer any questions.

I’m also disabled so the smart home really helps me.

I really like this statement I heard recently, which I think came from the YouTube Adventurous Way - "Dumb Control, Smart Monitoring". Make sure that any devices you install have failure models that make sense - you should still be able to control your appliances when the network is down.

That said, the option to remotely control lights, etc is fantastic. I also recommend setting up some temperature sensors in various places - I have quite a few ESP33 boards scattered around with sensors (and and one with an IR blaster) attached.

You can connect devices locally now. Eg. Zigbee/Z-wave network protocol without the need to use the internet. I know some builders started to implement smart devices for Apartments in the city which is easy to set the standards but for individual homes, would be harder to sell as it's costly..

I have a smart home and let me give you some advice. BE MINDFUL OF THE BRANDS YOU CHOOSE. For example, using tuya smart devices with home assistant is a pain, you have to setup a tuya cloud account and get an API key that you'll have to renew every few months. If the device gets reset you have to go back into the cloud environment and re-add them. It's such a pain. Almost anything works with home assistant, but the amount of diy and bullshit you have to deal with to get something working varies greatly between brands. I highly recommend sonoff, also get a zigabee controller for home assistant as its far better than using WiFi. I also recommend you start a notion document or some other form of document that can keep up with everything for you. What brand of switches are in what room, what brand of lights are where, etc. Not just for you but if you ever sell your home you can give it to the next guy. Because you're probably not going to take the light switches or any in line relays with you.

Also to not connect to the internet you need to have a separate network (router or access point) that all your smart devices connect to. You'll then use a VPN to connect to your home network remotely. Basically have your smart devices router hooked into your normal router and on your normal router block external traffic (the Internet) from going to the smart devices router. Sorry if that's hard to follow but just Google "how to segment a home network" and that should get you started. Feel free to hmu if you need some guidance.

Harmful, the internet of things in general is.

You don't need stuff that is 100% in a bot net caus its completely unsecured.

I've been using homeassistant since the start of the year and I'm never going back! Took a while to get the hang of it but being able to make my own smart electronics on the cheap is bloody awesome. Soldered my plug-in cannabis vape to an ESP32 microcontroller and now I can control its temperature from my phone!

None of my smart-home stuff is closed source which helps a lot with trust, and I've even tested it to ensure that everything works even if my flat's internet goes down! Having all my light bulbs running the FOSS WLED firmware also means that I can hook them up to my HyperHDR setup so all the lighting in my room changes colour to match my TV.

Yeah no. As a former IT guy the last thing I want is be tech support for my family’s light switch

It has its pros and cons. It's amazing if everything works, but a nightmare if I would have to start fixing and troubleshooting when I get back home from a long day at work.

I do appreciate people who have managed to set this up and working.

You can (mostly), but it involves more user input than the commonly advertised (google/alexa/etc.) integration.

You can choose sensors/actuators that run on protocols that don't touch the internet. Zigbee, Z-wave, rtl_433. The communication and data are local-only, from the device, to a transceiver on your automation host device. Home Assistant is a good place to start for the host, as others have said.

For some others that require networking of some kind, you can silo them. Put them on a VLAN with limited or no internet access, or just manually set the IP address without a valid gateway (not suitable for kit that is at all suspect).

For ones that must connect to some server owned by the company somewhere, the best bet is to just not buy them! Personally, I do everything I can to avoid kit like that. I absolutely loathe the idea of a device needing to phone home for basic functionality. It's just begging for the company to start charging, or even shut down the servers and leave you with a brick. Unfortunately, it means a lot of onus on researching kit before buying.

I've never seen the point, personally. Maybe this is just one of the things i'm too poor to ever understand.

Buddy of mine moved into a new apartment and they have a couple of "smart features": Temp, blinds, lights. No cameras (except the front door) or other fancy stuff.

However the apartment can be reached from any browser with a hash. So if you know the hash, you can easily access his apartment controls. No password, 2FA or anything necessary to identify him.

When he told me I was looking at him with wide eyes and he just laughed and said "Yeah, I know.".

Harmful, IMO.

Anywhere "smart" objects are, surveillance can also be. I've read 1984 enough times to know I don't want a telescreen on every available surface.

In theory it's awesome, but in practice it's a Black Hat heaven

I love my smart lights. It's convenient controlling my lights with my voice and setting up automation rules for them.

Yes, there's some privacy concerns. Personally, I just assume it might happen and consider it worth it. Honestly, I just don't really care much if Phillips knows when I turn my lights on. I mean, my neighbours can figure that out just by looking at my place.

I know some people with privacy concerns will go out of their way to avoid any "smart" devices that communicate over WiFi. If you stick with Z-Wave/ZigBee/Matter, you don't have to worry about any sort of external communications. I mean, even with WiFi devices you can isolate them by making a separate local-only network, but that's a pain.

One of the biggest improvements I noticed after switching to smart lights and home assistant was how much better my sleep got when I used a circadian light cycle. I don't think we realize how important the gradual shift is in triggering the release of sleep chemicals (not my field lol, just my experience).

Just a fun aside take a look at WLED for LED controls. My use case is not particularly practical but they are pretty cheap and lots of fun. That said I bet some smart folk have probably used it for various sorts of indicator lights.

As a hobby, yeah, go for it.

To save time and money, not so much. You will spend much more time in setup and debugging than you will ever recoup due to the automation. Same goes for the money.

I have always been pretty anti-smart homes. But it’s scope crept up on me. Often I wanted more manual automation. Christmas lights were on a light sensor timer power strip, lights going to the garage etc are on old school motion sensors so we didn’t trip.

• The one thing I did do was a thermostat, specifically a Honeywell. It was nice for scheduling and remotely cooling the house when on returning from vacation (or shutting it off if I forgot.)

• Then I got a wifi window ac for my office.

• Then I added some wifi mouse traps to prevent me from having to crawl under the house to check them.

• Then someone gave us a Weber iGrill sensor that was a pain to swap between phones.

Next thing I knew I had 5-6 apps. So I setup homeassistant to consolidate it. The Weber iGrill was the hardest but I had a pi in the kitchen running a calendar so I took a wekend and got it working in homeassitsnt.

Since then I have added some tplink kasa plugs and switches. The plugs are for Christmas lights this year. And one in the kitchen that we can plug a crock pot etc into and remotely start it while at work. The switches work just like a dumb one too. And are all locally controlled.

Finally I got a robot vac which is nice.

I still don’t have Alexa etc or cameras or mics in the house. And anything I do add needs to be only smart as a value add. IE: it should function as normal even without internet.

But yeah. I guess I have a smart home now.

My advice on HomeAssistsnt is make sure you products are supported if you go that route. Stay local only whenver possible. But it is nice. One app controls all. Again for me they all must function as a dumb device as well.

If any of it uses cloud services or requires internet access to function, then it's harmful. It will be gathering lots of personal data that will be sold. It will stop working if the company goes out of business or just decides to stop supporting your hardware or if they ban your account for whatever reason they want.

If it's all self hosted on your LAN, then it can be convenient, provided that whatever it controls can be manually operated if there is a problem. It's even better if you are using all open source hardware and software.

AIRGAP EVERYTHING.