Home automation / IoT / Security?

[Muzz]

I'm guessing most of us here are more tech savvy than the average user, but we all have a house's full of automation / IoT technology.

A while ago I noticed O'reilly we working on a book "Abusing the Internet of Things" (ISBN 1-4919-0233-7), then the Register published this article aboutSecurity of Smart Hubs

At home I've got Evohome, Nest (protect), Vera Edge, Hue and other technologies Just wondering how other people have dealt with security?

Andy

[Vangelis]

My concern would revolve around Big Data....A lot of IoT technology utilise Cloud in their communication. For instance Nest (Protect) gives you data regarding Functionality - Fast forward 5 years, and my home insurance might suddenly go up if my Nest (Protect) detects multiple activations within say a 3 month period?

Geo-Location is another interesting feature. If this is Cloud based....in theory, your house could be burgled with the assurance that each occupant is not within a 10 mile radius...

The majority of HA is WiFi based for comms and therefore is secure as your WPA2 encryption. Other protocols such as ZWave / ZigBee can have their own security built in (if setup correctly)

Vangelis

[paulockenden]

I notice how a lot of people post their energy usage to public sites such as pvoutput (alongside their PV generation).

It becomes VERY easy to spot if they are away from home, on holiday, for a week or two.

HUGE security hole, that hardly ever gets mentioned.

P.

[TimH]

I've avoided any use of vendor-provided cloud services and have set up my own via a dynamic DNS redirect service. Admittedly these instances have been for accessing the device's internal webserver, rather than any "value added" from the vendor's cloud.

HTH,
Tim.