Re:Hacked from a lightbulb
by spikej on Saturday February 08, 2020 @09:52PM
(#22280075)
So what's a "best practice" if you ARE going to have these things in your home? Keep them on a guest network that doesn't have access to your private network? (with a separate device to control things)
[ Parent
| on HN ]
Re:Hacked from a lightbulb
by Mister_Snuggles on Saturday February 08, 2020 @10:41PM
(#22280254)
I have a separate network for my IoT stuff - this network can access the internet, but cannot initate connections to my main network[0]. My main network can initiate connections to the IoT network. The Hue bridge works fine, with the default app, in this setup.
My main control device is a VM running Home Assistant, so the underlying system (Hue and TRÅDFRI mainly) doesn't really matter much.
[0] Mostly. There's a port open for one device to do HTTP POSTs of data to one machine on the main network. MQTT is also open so that my ESP32/ESP8266 stuff can push data to the broker.
This seems really nice! May I ask how you set it up? Is it a question of configuring routing, a firewall, or both? Does it matter if you have separate or a shared subnet?
I have some router with Shibby Tomato laying around (DD-WRT is unsupported), but I'm not sure if I need some other hardware, software, or if it's just a matter of finding the right settings…