evohome security with Domoticz/HGI80

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts
  • orange
    Automated Home Guru
    • Dec 2014
    • 149

    evohome security with Domoticz/HGI80

    Just a quick question: I know it's possible to read Evohome wireless data via a Domoticz/HGI80 and it seems like it's possible to control the Evohome via this method too (?) From what I can gather there is no setting to allow this in the Evohome setup (?)

    What's to stop a neighbour setting this up and reading/controlling somebody else's system ?
  • dty
    Automated Home Ninja
    • Aug 2016
    • 489

    #2
    Nothing at all. The security is very rudimentary. When you bind a device to the controller, they learn about each other's IDs. The devices will only accept commands from the controller, and vice-versa. But there's nothing stopping a malicious actor from broadcasting radio packets with fake device IDs on.

    Comment

    • orange
      Automated Home Guru
      • Dec 2014
      • 149

      #3
      interesting - seems a bit lapse IMO. Should have encrypted this

      Comment

      • dty
        Automated Home Ninja
        • Aug 2016
        • 489

        #4
        Unless you're Donald Trump, I doubt you're important enough for somebody to want to learn enough about the Rameses II protocol and then drive past your house and tamper with your central heating :-)

        Now the actual Evohome Security products, I know nothing about. I assume they're a bit more secure!

        Comment

        • DBMandrake
          Automated Home Legend
          • Sep 2014
          • 2361

          #5
          Keep in mind also that the protocol was designed about 15 years ago - it was a very different day and age when it came to security of wireless protocols! (or protocols in general)

          Remember that WEP (which claimed to be a secure encryption method at the time) was still current in 2002 and is now known to be horribly broken and insecure.

          I'm sure my wireless video baby monitor which uses "encryption" is also vulnerable to attack but (not being IP based) would require someone within about a 50 metre radius of my house with malicious intent and considerable technical know how to exploit it. The same could probably be said of the Evohome's wireless protocol.
          Last edited by DBMandrake; 26 January 2017, 03:16 PM.

          Comment

          • orange
            Automated Home Guru
            • Dec 2014
            • 149

            #6
            agreed - and I 'm not suggesting that anyone should lose sleep over it, but I'm guessing that most customers wouldn't assume that anybody could so easily tamper with it.

            do we know for sure Donald Trump has Evohome installed ?

            Comment

            • paulockenden
              Automated Home Legend
              • Apr 2015
              • 1719

              #7
              I think the issues are bigger than being able to turn up someone's heating, but I don't think it's wise to post the details.

              Comment

              • dty
                Automated Home Ninja
                • Aug 2016
                • 489

                #8
                Originally posted by orange View Post
                agreed - and I 'm not suggesting that anyone should lose sleep over it, but I'm guessing that most customers wouldn't assume that anybody could so easily tamper with it.

                do we know for sure Donald Trump has Evohome installed ?
                Big ole' draughty 400 year old house? Let's hope so!

                Comment

                • orange
                  Automated Home Guru
                  • Dec 2014
                  • 149

                  #9
                  Originally posted by paulockenden View Post
                  I think the issues are bigger than being able to turn up someone's heating, but I don't think it's wise to post the details.
                  do honeywell know ?

                  Comment

                  • paulockenden
                    Automated Home Legend
                    • Apr 2015
                    • 1719

                    #10
                    Originally posted by orange View Post
                    do honeywell know ?
                    Yes. But let's just leave it there.

                    Comment

                    • DBMandrake
                      Automated Home Legend
                      • Sep 2014
                      • 2361

                      #11
                      Originally posted by orange View Post
                      do we know for sure Donald Trump has Evohome installed ?
                      Evohome is not available in the US market so I'm guessing no.

                      Comment

                      • paulockenden
                        Automated Home Legend
                        • Apr 2015
                        • 1719

                        #12
                        Doesn't he own stuff in Scotland and Ireland?

                        Comment

                        Working...
                        X