Show notes are at https://stevelitchfield.com/sshow/chat.html
…
continue reading
内容由Jupiter Broadcasting提供。所有播客内容(包括剧集、图形和播客描述)均由 Jupiter Broadcasting 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品,您可以按照此处概述的流程进行操作https://zh.player.fm/legal。
Player FM -播客应用
使用Player FM应用程序离线!
使用Player FM应用程序离线!
Security Growing Pains | Self-Hosted 37
Manage episode 283522310 series 2135834
内容由Jupiter Broadcasting提供。所有播客内容(包括剧集、图形和播客描述)均由 Jupiter Broadcasting 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品,您可以按照此处概述的流程进行操作https://zh.player.fm/legal。
We discuss recent Home Assistant security news, and how we think the project could improve.
Plus a bunch of follow up, emails, and more!
Note: This episode was recorded before the recent second Home Assistant vulnerability
Sponsored By:
- Linode: Receive a $100 60-day credit towards your new account. Promo Code: linode.com/ssh
- CloudFree.shop: CloudFree Smart Plug – Runs Tasmota for $9. Use code SELFHOSTED and support the show. Promo Code: SELFHOSTED
- A Cloud Guru: Looking to make a high-paying career move into the cloud? Get going: acloudguru.com
Links:
- Security Bulletin 1- Home Assistant — It has come to our attention that certain custom integrations have security issues and could potentially leak sensitive information.
- Security Disclosure 2: vulnerabilities in custom integrations HACS, Font Awesome and others - Home Assistant — . The conclusion is that some custom integrations are still vulnerable to a directory traversal attack while not being authenticated with Home Assistant. It allows an attacker to access any file without having to log in. This access includes any credentials that you might have stored to allow Home Assistant to access other services.
- Generic Thermostat - Home Assistant — The genericthermostat climate platform is a thermostat implemented in Home Assistant. It uses a sensor and a switch connected to a heater or air conditioning under the hood.
- ATCMiThermometer — Custom firmware for the Xiaomi Thermometer LYWSD03MMC and Telink Flasher via USB to Serial converter.
- ESPHome — ESPHome is a system to control your ESP8266/ESP32 by simple yet powerful configuration files and control them remotely through Home Automation systems.
- Xiaomi Mijia BLE Temperature and Humidity Sensor - Home Assistant — The mitemp_bt sensor platform allows one to monitor room temperature and humidity. The Xiaomi Mijia BLE Temperature and Humidity sensor with LCD is a small Bluetooth Low Energy device that monitors the room temperature and humidity.
- Xiaomi Mijia Bluetooth Thermometer — New Xiaomi Mijia Bluetooth Thermometer 2 Wireless Smart Electric Digital Hygrometer Thermometer
- Google-drive-backup: Automatically create and sync Hass.io snapshots into Google Drive — A complete and easy way to back up your Home Assistant snapshots to Google Drive.
- Troubleshooting your configuration - Home Assistant
1655集单集
Manage episode 283522310 series 2135834
内容由Jupiter Broadcasting提供。所有播客内容(包括剧集、图形和播客描述)均由 Jupiter Broadcasting 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品,您可以按照此处概述的流程进行操作https://zh.player.fm/legal。
We discuss recent Home Assistant security news, and how we think the project could improve.
Plus a bunch of follow up, emails, and more!
Note: This episode was recorded before the recent second Home Assistant vulnerability
Sponsored By:
- Linode: Receive a $100 60-day credit towards your new account. Promo Code: linode.com/ssh
- CloudFree.shop: CloudFree Smart Plug – Runs Tasmota for $9. Use code SELFHOSTED and support the show. Promo Code: SELFHOSTED
- A Cloud Guru: Looking to make a high-paying career move into the cloud? Get going: acloudguru.com
Links:
- Security Bulletin 1- Home Assistant — It has come to our attention that certain custom integrations have security issues and could potentially leak sensitive information.
- Security Disclosure 2: vulnerabilities in custom integrations HACS, Font Awesome and others - Home Assistant — . The conclusion is that some custom integrations are still vulnerable to a directory traversal attack while not being authenticated with Home Assistant. It allows an attacker to access any file without having to log in. This access includes any credentials that you might have stored to allow Home Assistant to access other services.
- Generic Thermostat - Home Assistant — The genericthermostat climate platform is a thermostat implemented in Home Assistant. It uses a sensor and a switch connected to a heater or air conditioning under the hood.
- ATCMiThermometer — Custom firmware for the Xiaomi Thermometer LYWSD03MMC and Telink Flasher via USB to Serial converter.
- ESPHome — ESPHome is a system to control your ESP8266/ESP32 by simple yet powerful configuration files and control them remotely through Home Automation systems.
- Xiaomi Mijia BLE Temperature and Humidity Sensor - Home Assistant — The mitemp_bt sensor platform allows one to monitor room temperature and humidity. The Xiaomi Mijia BLE Temperature and Humidity sensor with LCD is a small Bluetooth Low Energy device that monitors the room temperature and humidity.
- Xiaomi Mijia Bluetooth Thermometer — New Xiaomi Mijia Bluetooth Thermometer 2 Wireless Smart Electric Digital Hygrometer Thermometer
- Google-drive-backup: Automatically create and sync Hass.io snapshots into Google Drive — A complete and easy way to back up your Home Assistant snapshots to Google Drive.
- Troubleshooting your configuration - Home Assistant
1655集单集
Alla avsnitt
×欢迎使用Player FM
Player FM正在网上搜索高质量的播客,以便您现在享受。它是最好的播客应用程序,适用于安卓、iPhone和网络。注册以跨设备同步订阅。