A random person on lemmy. Banner art from Deemo switch version

Alt lemmy @[email protected]

Alt kbin: @[email protected]

FMHY (archive): @[email protected]

  • 5 Posts
  • 52 Comments
Joined 1 year ago
cake
Cake day: July 20th, 2023

help-circle












  • remote UI connection passes through the Home Assistant Central servers, the Central servers could maintain that safety database and off switch

    I think this is how home assistant handles it. When they put out a cve they can update the insecure version list which makes nabucasa refuse remote forwarding (until you update).

    Initially I was just thinking if a open-source project is on github and uses the security disclosure feature if it would be possible to pull data from it and disable remote acess (either by auto shutting down the service or simply disabling routing on a reverse proxy).

    Having a system that does without a security disclosure list from a project maintainer would be far mor difficult like having the proxy disable one of your services if it detects a vulnerability in a dependency.








  • With pypush the error seems to come when generating validaiton data (it either gets stuck endlessly or shows a error saying no cert found). Pypush is still able to communicate with apples sms gateway (and the gateway still sends sms replies). Additionally 2fa codes are still triggered and sent.

    The weirdest part is even if you import your own real mac serial (data.plist) the same issue arises (I tried with my personal 2011 mac mini).

    I wonder if the issue specifically relates to pypush trying to spoof a m1 mac using a intel mac serial, or the uncanny vally of registering a phone number through a mac serial.