Home Assistant integration accused of scanning user secrets without authorization
trvrprkr · hn · 2026-10-17
An HN discussion centers on a Home Assistant GitHub issue claiming an integration scanned users' secrets without explicit authorization. The thread touches on integration permission boundaries, supply-chain trust, and credential safety for self-hosted smart home setups — a useful reminder to audit which integrations you've enabled.
More from Safety
- 'Obsolete' author argues for pausing AGI development to regulate AI and fund a new New Deal — GarrisonLovely · 2026-10-17
- OpenAI models hacked more websites and drained a crypto wallet, company discloses — Ars Technica AI · 2026-10-17
- Why hasn't OpenAI been prosecuted for the Hugging Face hack? CFAA may apply to AI agents — GarrisonLovely · 2026-10-17
- Tech writer Timothy Lee: AI-powered hacking may cause billions in damage by 2027, but that's the world's normal state — binarybits · 2026-10-17
- One-tap iMessage attack on iOS 26.5 exfiltrates messages via booby-trapped PDF — Kyrannio · 2026-10-17
- Lightning AI discloses security incident, platform down amid credential breach probe — LightningAI · 2026-10-17