5 ms·
I mean there's no guarantees it'll be any safer because of a lack of outside audits or hackers finding out about it, but it will be safer because it's a one-off
by Cthulhu_ 2y ago
I mean there's no guarantees it'll be any safer because of a lack of outside audits or hackers finding out about it, but it will be safer because it's a one-off and unique implementation, instead of a known weak system with countless users that could all be affected.
- Dalewyn 2y agoSecurity Through Obscurity deniers are screaming like banshees right now.
- Havoc 2y agoWell for starters it’s local network only so I’d argue that it is objectively safer than whatever shitty app/cloud thing IOT suppliers rolled. Worst case I just firewall the ip of the ESP32 off but frankly o haven’t bothered But yeah the aliexpress ESP32 could be compromised or ESPHome could be but those are dice I’m willing to roll
- reaperman 2y agoI agree on the “guarantee” if read pedantically. But I can at least use proven frameworks for authentication and even integrate passkeys. I might do it wrong, of course, but there’s an incredibly, extremely high chance that it will be safer than the API in TFA which was known to only use email address string regurgitation as its sole authentication.