As someone who has spent many years working on my smart home, I suggest, as do others, KEEP IT LOCAL.

The only smart objects I have are some light bulbs. I think, some processes are good to automate and put software in control of, and some things I want to have explicit control over (I.E. Door locks, Safe locks, AC settings, Heating). Technology can break in fantastical ways, but a lock should just freaking work.

Using home assistant since 2017. As you add stuff there’s more synergy, like a network effect. I have automations and services that:

• Adjust the bathroom floor thermostat according to the prevailing hourly energy price

• Adjust the colour temperature of lighting during the day so blue light is reduced in the evening, allowing natural melatonin production to function

• Announce on a local speaker when our child gets to school in the morning using their phone location

• Operates festive lighting in the winter with reference to sunset and sunrise

• Turns off all lights when leaving; or sometimes if I’m feeling more paranoid

• Replays lighting patterns from a previous week to simulate* occupation

• Sends me an alert if motion is detected and nobody’s home

• Turns off the picture on the TV if nobody’s in front of it for a while using a 60GHz radar sensor

as well as a few other things. I don’t want a smart home that’s just remote operation with a phone. I want to use capabilities to automate things so I don’t need to be concerned about them.

I have always been pretty anti-smart homes. But it’s scope crept up on me. Often I wanted more manual automation. Christmas lights were on a light sensor timer power strip, lights going to the garage etc are on old school motion sensors so we didn’t trip.

• The one thing I did do was a thermostat, specifically a Honeywell. It was nice for scheduling and remotely cooling the house when on returning from vacation (or shutting it off if I forgot.)

• Then I got a wifi window ac for my office.

• Then I added some wifi mouse traps to prevent me from having to crawl under the house to check them.

• Then someone gave us a Weber iGrill sensor that was a pain to swap between phones.

Next thing I knew I had 5-6 apps. So I setup homeassistant to consolidate it. The Weber iGrill was the hardest but I had a pi in the kitchen running a calendar so I took a wekend and got it working in homeassitsnt.

Since then I have added some tplink kasa plugs and switches. The plugs are for Christmas lights this year. And one in the kitchen that we can plug a crock pot etc into and remotely start it while at work. The switches work just like a dumb one too. And are all locally controlled.

Finally I got a robot vac which is nice.

I still don’t have Alexa etc or cameras or mics in the house. And anything I do add needs to be only smart as a value add. IE: it should function as normal even without internet.

But yeah. I guess I have a smart home now.

My advice on HomeAssistsnt is make sure you products are supported if you go that route. Stay local only whenver possible. But it is nice. One app controls all. Again for me they all must function as a dumb device as well.

Smart homes sound good in concept and I’d love to have one if there weren’t so many risks. But an entire home that can be controlled via computers just sounds like an opsec nightmare. Obviously there’s the plus that your average technologically illiterate granny isn’t going to be using these so it will most likely have strong security systems. But hackers love a challenge.

And a whole neighborhood? A systemwide attack could happen disrupting entire swaths of a city’s residential zone. Imagine showers suddenly spraying boiling water, targeted attacks on epileptic individuals with flashing lights, temperatures dropping to below freezing or up to dangerous levels of heat or lightbulbs overloading sending broken glass everywhere, speakers bursting eardrums.

Not to mention more subtle dangers of such voice activation systems being accessed by malicious actors, or more likely, corporate concerns. Someone gangstalked or targeted by powerful people who could just court order one of these smart home companies to hand over the data and they probably will without fuss.

The attack surface of a single electronic device is massive, with dozens of different apps and services, each with different system vulnerabilities to exploit that’s already hard enough. But just imagine the attack surface of an entire home! Everything from the LG Flatscreen in your living room, to the temperature control systems, to your Apple Smart Toaster can be hacked to gain access to the rest of the system. If any one of those isn’t completely secure (which of course is a pipe dream) then it could be the gateway to a smart home hacking story on a Defcon panel.

And finally, what’s stopping the company from just updating the software for your smart home and paylocking features like “Uh yeah, you need to pay 12.99$ a month to have your cctv cameras work.” And because all the framework that runs the systems is being hosted in proprietary servers, you can’t do shit. And you can’t host your own servers either. Does this sound familiar because it should?