• 0 Posts
  • 33 Comments
Joined 11 months ago
cake
Cake day: August 16th, 2024

help-circle
  • The security here is the WiFi password anything that connects to LAN gets a LAN vlan tag. but it’s not like anything that connects to any of the SSIDs can get the DHCP lease of some random device on any vlan cuz it got tagged before. Or am I missing something?

    That sounds accurate. I have all my devices assigned a specific IP address, based on their MAC address, but that’s only per-interface. The other interfaces aren’t aware of my assignments for each other.

    If I connect my phone to my LAN SSID, it’ll get its assigned IP, but if I connect it to the NOT [network of things, no internet access] SSID, it’ll get assigned a new address out of the DHCP pool because I haven’t assigned it an IP on that interface, until I assign it an IP. But, which VLAN it’s connected to will determine which IP its getting, and it still requires me to know the passwords for each SSID.

    I believe where you’re getting confused is that a some businesses (or homelabs) might use a RADIUS server which will be more like this: ONE_SINGLE_SSID-Broadcast -> Device connects -> RADIUS Server detects account/certificate/MAC -> RADIUS Server assigns interface -> Device connects to VLAN the RADIUS server granted it access to

    So, in that scenario, if the ONLY thing that’s being used to validate the access is the devices MAC address, just changing the MAC address will effectively grant a completely different level of access with nothing else changing. Most people in a homelab (and even plenty of larger businesses) aren’t running the infrastructure to do this though, they’re just effectively connecting a VLAN to a port and then that port can only be used to connect to that VLAN. They’re doing the same with the WiFi SSIDs where each SSID connects directly to the VLAN.

    Usually though, for places that are implementing the RADIUS server, they’ll also install a certificate on their devices and the certificate needs to be in place in order to get certain access otherwise the RADIUS server will authorize less permissive access or just won’t allow access at all. Or, it’ll also need a user to log in to gain additional access.

    For wired, the company may also implement port locking where the port will only allow a certain amount of MAC addresses to connect (presumably one unless there is also a VOICE VLAN with a phone being used, in which case it’d be two) where if you change your MAC address (or connect a different device), the port will lock and won’t power POE devices and won’t allow connectivity until an admin clears the lock. It’s possible that they may have multiple VLANs allowed on the port and client side you can change VLANs, but, this isn’t typically done on all ports, usually only on trusted ports or ports that need the multiple VLANs (my VM server for instance has access to a port that’ll allow multiple VLANs and I just enter the tag I need when I create the VM). This would be similar to your WiFi scenario, the port with the WAP connected to it will have access to multiple VLANs and then those WLANs just connect to the VLAN that they’re assigned to.

    TL;DR - Typically one wireless SSID connects to one VLAN and if you want to jump to the other VLAN you’d need to connect to the other SSID, so you still have the individual passwords protecting you. On wired, typically VLANs are assigned per port and you can’t jump between then, but where they aren’t, it should be in a planned way and not just every port having access to every VLAN. Bad implementations exist though, so, anything is possible.


  • VMs can also be live migrated to another server in the cluster with no downtime and backups don’t need to take the VM down to do their thing. If in the future you want to move to physical hardware, you can use something like Clonezilla to back it up (not needed often, but still, something to consider).

    Both have their places, but those factors are the main ones that come into play of when I want to use a VM or LXC.





  • They’ve done this once before and walked it back.

    Out of that decision and the backlash came the metrics, so they’d be able to make informed decisions before depreciating something.

    Last time, I used Core (IIRC, it wasn’t even called Core back then) and was quite upset. Before they walked it back, I switched to the OS version and don’t really regret it. If their metrics now tell them that core isn’t worth supporting, it probably isn’t, but I definitely understand being upset about it.

    It definitely sucks that the system that’s supposed to be about giving users freedom and options is removing some.

    ETA: Backups also make this whole thing so much easier now. Back then, backing up and restoring core meant manually copying a bunch of files, but now, it’s a completely different and easier experience.


  • A lot of people don’t have a fully offline setup and still have at least some devices that talk to the cloud. If that’s the case, if they make any changes, HA has to also update in response to those changes, so they really can’t treat it as an ‘appliance’ that can just sit there.

    HA devs are also pretty frequently updating HA to make it better (better dashboards, better methods to create automations, etc…) and if you update at least every couple of months you’ll be able to adapt pretty easily.

    Mine will largely function without internet, at least it will for anything needed, but does still need WiFi, but, I still keep it up to date. They’re also constantly updating and adding services that it can tie into, so, keeping up to date adds a lot of features you may not have even known you needed/wanted.


  • TVA@thebrainbin.orgtohomeassistant@lemmy.worldUpdate policy?
    link
    fedilink
    arrow-up
    4
    arrow-down
    1
    ·
    3 months ago

    2.1.4 is fixing things in 2.1.3 and when those broken things effect you because you decided to install a known buggy version, then you’ll shift the complaint that it shouldn’t have let you install the broken one that would have effected you.

    Pay attention to the update notes and let the system take backups, that’ll cover you 99% of the time.

    I had something similar happen with a Node-Red update a few years ago and I stopped allowing automatic updates and started reading the notes and being proactive about my updates and have had zero issues since because I ensure my system is ready for the updates first.


  • Yeah, my problem with it is that it’s always something. I’ve been giving it a go about once a year since they forked from Emby and everytime something has made me drop it.

    If I’m having problems with it the handful of times I go to watch something using it, the people I share with DEFINITELY would and now I have to handle their auth crap myself as well.

    I’ll probably prioritize just keeping a server going side by side now for a lot longer than a month or two at a time and try to find solutions to my problems. it’s never really been a priority before since Plex worked, but the writing has been on the wall for a while now that the enshittification is in full swing and now I need to make sure I’m ahead of it.

    Blah, this sucks.



  • @AbraNidoran@beehaw.org already took care of what SMART means and is good for, so, I’ll address what the spirit of your message instead.

    For me, _almost _nothing in my house phones back anywhere with telemetry. Sure, anything that uses WiFi needs the network to run, but almost nothing has access to the actual internet because it’s on a VLAN that specifically blocks internet access.

    If you plan out the equipment you buy, you can ensure it’s safe (the absolute easiest way to do that would be to only buy z-wave or zigbee equipment since by design that’s a completely offline ecosystem, unless you buy a controller for it that requires the internet). With WiFi, I basically only buy stuff that can be flashed to ESPHOME, which removes its online requirements and puts a completely different firmware on the devices … this is more work than most people would want to do though, but you can always buy devices that were already flashed by someone else. IIRC, there are even some devices that come that way from the factory and use ESPHOME as an option. Or, they’re devices where I bought the sensors and microcontrollers and wired them up myself and put ESPHOME on the microcontroller.

    For me, I love walking into a room and the lights turning on. If it’s night, the lights are red to not jolt me awake. Later in the night, they’re dim and a bit more orangey rather than bright white. These are QOL improvements that I would not want to go back to not having.

    My garage doesn’t have any of the standard RF “clickers”/4-digit-code-panels connected because they’re garbage, but I have a relay sitting on it that I can remotely trigger and open the garage. I have motion sensors so that if no one has been in the garage for the last 5 minutes and the door is open, it’ll close the garage door (this was because people kept forgetting it was open.) I have sensors to let me know when the windows are open at the same time as the heating/air conditioning to try and prevent burning money. None of this is internet enabled, but it is controllable over my network and my network is accessible over my VPN.

    If the humidity is high in the bathrooms, it assumes someone is taking a shower and turns on the exhaust fans if they’re not already on. This can help prevent mold from growing. There are some real benefits to things being smart and I do 100% agree with you that apps that send data to companies on when we’re home/away and all that are BAD, but, if you plan ahead you can have your cake and eat it too, but the number of choices for equipment you’ll have will be lower, but at least your stuff will keep working regardless of internet access and regardless of whether the company that made the equipment is still around or not.


  • I have my bathroom fan turn on if the lid has been open more than 45 seconds … some things you just don’t (yet) know you need to be smart :-D

    For me, all of our lights are smart (some bulbs with smart switches that talk to the smart bulbs and some just smart switches), but, everything needs to be able to function like it’s dumb … nothing needs an app to function. The wall switches will function as expected … home assistant adds additional functionality, voice commands add extra functionality, but, it all works as you’d reasonably expect it to if you just go and hit the wall switch.







  • Right‽ Gotta love when people think that their opinion is the only one that matters.

    Dude is making one board that’ll work for as many situations as possible and letting you decide what you want to do with it (and it’s right there in the name - future proof!), but somehow that is honestly too much.

    For myself, I like having options.

    Also, the official HA hardware also has an expansion port on it, think this guy complained about having that on there as being too much?



  • My grandma quit using a program that basically attempted to break your habits.

    She did things like:

    -if you normally have a smoke break at noon, wait til 12:30. Tomorrow do it at 11:30 instead

    -If you normally use a lighter, switch to matches, tomorrow use a lighter.

    -On Monday, Wednesday,Friday switch to a different brand of cigarettes … next week go the opposite days.

    -Smoke, but every other drag put a pen in your mouth instead.

    -Only allow yourself to smoke half a cigarette and then chew a stick of gum for the rest of the time you would normally smoke

    -Alternate smoke breaks between smoking and chewing nicotine gum or using the patch (I don’t think she used the patch so I’m guessing on that one).

    And just a lot of things like that that didn’t specifically stop you from smoking, but attempted to stop it being a mindless thing that you just do on reflex without much thought and made it so before lighting up she’d have to think about what the current rules are … at a certain point, the habit has been broken and you don’t seek it… it worked great for her. Was a 6 month or so process and then she never went back once she finished her last pack.

    There was a whole program around it with those types of rules and things you’d do and time restrictions on certain days and stuff … sorry, she passed a few years back and I can’t ask her the name of the program.

    Good luck! Just remember that even if you lapse, any length of time that you’re able to smoke less or stop smoking all improve your overall health! Even if you have a setback, any time that you stop is still a win!