The security issue is that they're sending my data back to their sites (phone homes) via HTTP not HTTPS. Schedules, on/off status and device hashes. At that poi

The security issue is that they're sending my data back to their sites (phone homes) via HTTP not HTTPS. Schedules, on/off status and device hashes. At that point if you had the traffic it would be fairly trivial to pretend you were one of my registered devices locally (this is how I did initial testing), possibly even over the internet back to Hue (not tested, as their webservice hasn't quite worked for me in normal circumstances) Also, reintroduce yourself! Coffee in Columbus talking shop doesn't narrow it down enough for me.