Household data can convict, exonerate or mislead. That makes digital forensics indispensable and demands careful guardrails
    • VibeSurgeon@piefed.socialEnglish
      11 days

      Valetudo runs alongside the existing software on the robot vacuum though, does it not?

      • GreyEyedGhost@piefed.caEnglish
        11 days

        From what I gather, valetudo sits between the firmware and the cloud, co-opting cloud functionality and serving that from the vacuum. Since nothing is going to the cloud, only the information stored on the robot, or that you’ve stored yourself, can be used against you. So while your vacuum may have a microphone or camera, it shouldn’t be recording what you say or do anywhere. I have yet to start my valetudo journey and have barely started my robot vacuum journey precisely because of scenarios like this.

        • VibeSurgeon@piefed.socialEnglish
          11 days

          I’m not convinced this actually holds. To be able to use Valetudo at all, you at minimum do need to connect it to a wifi network which you are connected to as well on some kind of device. Unless you happen to be setting up some kind of firewalling on the robot vacuum, it is at that point free to start logging whatever information it deems appropriate.

          • GreyEyedGhost@piefed.caEnglish
            11 days

            The code is open source. Like any open source software, unless it’s been vetted, you’re relying on trust. The premise is that the software is running on the vacuum, so there is no cloud or remote storage. So, just like anything else self-hosted, unless your network is compromised or you configure it to allow it, nothing external is accessing it. If you don’t trust it, vet it. Read the code or check your network logs.

            • VibeSurgeon@piefed.socialEnglish
              10 days

              I’m not talking about the code in Valetudo - I’m talking about the code that’s already running on the robot vacuum before installing Valetudo. It remains on the device after you install Valetudo.

              Basically, any concerns about privacy stemming from the original software on the robot vacuum do not get eliminated by installing Valetudo

              • gopher@programming.devEnglish
                10 days

                Valetudo actively blocks the cloud connections. Also, only firmware versions specifically installed with Valetudo is supported (so no chance an update to the original device firmware happens, and does new things).

                I think there’s a very low chance something escapes to the vendor cloud.

                None the less, I personally run these on a separate VLAN without internet access.

                • VibeSurgeon@piefed.socialEnglish
                  10 days

                  Valetudo actively blocks the cloud connections.

                  Are you sure about that? It’d be a pretty big feature to implement, and surely it would be something that the Valetudo author would mention in the docs for the project.

  • susieq0044@sh.itjust.worksEnglish
    11 days

    A smart home is in reality a vulnerable home, and a smart device a vulnerable device. Reduce their use as much as possible.

    • cynar@lemmy.worldEnglish
      11 days

      Smart home stuff can be done right.

      • You need to focus on the use case. Is what it is doing actually necessary? E.g. smart lights are amazingly useful, smart washing machine? Why?!?

      • The S in IoT stands for security. Smart devices need to be treated as security risks. Mine have their own WiFi to play on. They don’t get to play with my important devices. Also, internet access is a privilege, not a right. ZigBee is often superior to WiFi too. Control the bridge and you have absolute control of their internet access.

      • Open source for the win. A lot of IoT options can run open source firmware. This helps break open the black boxes and let you see if they are doing bad things. Home assistant, EspHome, and Tasmota are the big 3 to look into.

      • If you’re not the customer, you’re the product. Google etc sell smart speakers at a loss. If you must have them, treat them as actively hostile. I’m still trying to find a good alternative to some of their functions, but getting there.

      • IMALlama@lemmy.worldEnglish
        9 days

        smart lights are amazingly useful

        I’m not saying your wrong, but I also don’t understand the use case? Maybe I’m a Luddite, but things like like dimmers, motion sensors and two way light switches seem to meet my needs well. It’s also not difficult to buy high CRI lights in the color temperature we like.

        What am I missing?

    • SuspiciousCarrot78@aussie.zoneEnglish
      11 days

      I would say the way that most people use smart devices, yes. But if you have the time and patience to select the correct smart devices and set them up properly, you’re fine.

      Of course, people are lazy, so for most folks, inviting Google Alex or Nest into their house leads to…chicanery.

      PS: pick a robot vacuum cleaner that can work without sending shit to someone else’s server. And make your own “Alexa”

      • susieq0044@sh.itjust.worksEnglish
        11 days

        You are right. And always consider the worst case scenario. When my father-in-law ended up in hospital, I had to take care of his apartment, and I couldn’t find out how to turn the lights on. It took me 15 minutes to understand his remote control 🤪