2 ms·
> a simple (but secure!) local API A bit of an unusual idea, but: if the users of such a thing are folks who're already playing with HA and are tech savvy, why
by user_7832 1y ago
> a simple (but secure!) local API
A bit of an unusual idea, but: if the users of such a thing are folks who're already playing with HA and are tech savvy, why not just expose the API and tell users that they're "only allowed to use the "hacker's update in good faith" if they put the devices on a separate network without internet access?
Your team doesn't need to spend a ton of time on making it super secure, and DIYers can continue to use the hardware for as long as it physically works, me thinks
- idorosen 1y agoLiability.
- anonym29 1y agoIsn't this exactly what the mountain of liability waivers already included in the ToS are for?
- rcyeh 1y agoNot a lawyer, but liability waivers may not apply if there is determined to be gross negligence or recklessness. Making a reasonably-designed API available, only if connected to an inaccessible network, doesn't sound dangerous, but the goodwill gained might be hard to weigh against a miniscule chance of malware, which would revise everyone's opinion of the degree of negligence or recklessness.