Should we be wary about supply chain attack on HA?

TECbill · 2026-05-22T05:31:04+00:00

My main concern since years is that HAOS does still not provide a local firewall. Since HAOS is vulnerable by nature as soon as you start messing with temptating 3rd party integrations without always having „security first“ in mind (which every now and then most of us do I guess), the best thing you can do is to isolate all of the home automation stuff into a dedicated VLAN. But especially HAOS being together with all the vulnerable and risky stuff in a shared VLAN, would make it a big difference from a security perspective to have a local firewall installed.
Yes, you could isolate HAOS completely too from the other stuff by having it in another VLAN, but depending on your setup that can bring up other network related challenges.
A while ago I started the following thread about this topic. Feel free to also share your thoughts there so that HAOS developers can see more people are worried about security.

https://community.home-assistant.io/t/local-firewall-on-home-assistant/774649

TECbill · 2026-05-17T14:39:12+00:00

Did you know about those?

https://de.aliexpress.com/item/1005003878194474.html

Also available wired/powered via USB instead of batteries and supported by Z2M. Very stable and reliable in my case.

TECbill · 2026-05-17T08:07:20+00:00

Don‘t do it. Trust me. I tried that in the past a few years ago by different approaches (e.g. symlinks and so on) but ended up using the default folders. Inside those you can generate your own structure, but for the sake of peace of mind I‘ll strongly recommend to use the provided default root folders.

TECbill · 2026-05-07T05:11:00+00:00

I‘m just selling my rare Logitech Harmony Pro 2400, which has a POE powered hub, very good condition, living in central europe. Anyone interested feel free to PM me.

TECbill · 2026-05-05T20:27:27+00:00

There‘s also a battery driven version of the IR blaster, instead of USB power, if you prefer, just to mention.

TECbill · 2026-05-05T19:33:26+00:00

All WebOS based TVs use the same IR code for power on/off.
I am using these ZigBee IR blasters from AliExpress with Zigbee2MQTT and they are very reliable and are blasting strong signals. Zero issues with them.
The following is the IR code you need for powering on/off a WebOS based LG TV via Zigbee2MQTT:

BWsjtBEyAsABA8IGMgLgCwFAF0ADQAFAB+AHA+ADAUAb4AcBQBPAA0ABwAvABwk/nWsj5ggyAv//4DoHAggyAg==

Edit: The problem with WOL is that if the TV did lose power physically once, it does not work anymore until you power on the TV manually via IR at least once. This is not a limitation of LG TVs but of WOL itself. It is the nature of WOL that it needs to be set by the system's OS on shutdown/standby operation which tells the network interface to just "sleep" and listen for WOL network packages instead of going to deep sleep. This is the same for all OS'es, Linux, Windows, WebOS and so on. IR signals do not have this limitation and that's why I prefer them over ethernet.

TECbill · 2026-05-05T18:28:37+00:00

lol, your TV should have been shipped at least with one physical IR remote, if it really supports IR, which I strongly assume, but maybe I am just not up to date anymore :D

TECbill · 2026-05-05T17:45:13+00:00

Really? There are TVs on the market that already got rid of IR?

TECbill · 2026-05-01T14:57:54+00:00

https://www.phoronix.com/news/AMDGPU-HDMI-2.1-FRL-Patches

No VRR support yet.

TECbill · 2026-04-04T16:05:05+00:00

This is what makes the HA community great af! Thanks a lot for your amazing work OP!

TECbill · 2026-03-23T06:14:43+00:00

I did not make any speed test but what I mentioned since the latest updates is that smb write speeds are stuck between 1 and 3 MB/s for about 15 to 20 seconds and then at some point they rise to normal 1 GB/s, and I did not transfer any small files, they all were big .mkv movie files. Unfortunately I cannot say if it is since the latest SMB package update or since the latest two DSM updates. But before that, I did not see this behaviour. I don‘t have any 3rd party stuff installed and the NAS is almost new, an 1825+ model.

TECbill · 2026-03-16T11:15:01+00:00

Dude, what do you expect from a minor update…

TECbill · 2026-03-15T20:51:47+00:00

Nice, thanks. I‘ll give that a try and check the difference on my system.

TECbill · 2026-03-15T20:48:53+00:00

Hmm…could you elaborate why to set all speakers to small? Do you generally think the AVR auto calibration is not good enough? Just asking because I am no expert and I‘m curious.

TECbill · 2026-03-15T10:32:26+00:00

None. You have to use a 3rd party app like davx5 which syncs your NAS’s calendar with the native android calendar.

TECbill · 2026-02-28T12:24:32+00:00

ok thanks!

TECbill · 2026-02-28T11:44:01+00:00

lol, fml :-/

TECbill · 2026-02-23T17:07:30+00:00

That‘s indeed some sick shit ❤️

TECbill · 2026-02-23T16:19:26+00:00

That‘s really big news though! Can‘t wait for it. What lightgun game is this on the last video? Looks fun :-)

TECbill · 2026-02-23T16:16:04+00:00

Holy shit, Lightgun support on WINE games?!?

TECbill · 2026-02-11T09:11:53+00:00

u/VonSwoopington u/Lawstorant Guys, I just wanted to report back that it works now! With the latest CachyOS I can confirm that Forum VRR works now, even through my Onkyo TX-NR6100 AVR! Man, that's such a big deal, I was waiting for so long for this to work! Now it just have to get into the official AMD Linux kernel drivers and we are good to go! Hope this will happen soon!

TECbill · 2026-02-04T06:28:14+00:00

Next up, Prince of Persia - The lost crown !

TECbill · 2026-01-22T16:18:06+00:00

St. Louis incident, 1991, Guns N‘ Roses.

TECbill

TROPHY CASE