Security issues about radiotherm HOT 4 OPEN

Good points.

I'll try to draft something up in the next few days to add to the README. Thanks for reaching out, I appreciate it!

from radiotherm.

As with any IoT thing, it's generally not advisable to put the device 1) on a network with an internet connection, and 2) on a network connected to other devices you care about.

from radiotherm.

As with any IoT thing, it's generally not advisable to put the device 1) on a network with an internet connection

Unclear. Many of the better-designed ones get updates from the internet, so keeping them off isn't necessarily a good idea.

on a network connected to other devices you care about.

The device in question can be operated either through an app connected to the internet, or through the same app via LAN. If you want to control it with the manufacturer's app and your own phone, both your phone and the device will have to be connected to the same network at some point.

I do agree with you, though: you can mitigate the issue by disconnecting the device from the internet and properly isolating it. I think mitigation suggestions would be great to add to the README, too.

from radiotherm.

The device in question can be operated either through an app connected to the internet, or through the same app via LAN. If you want to control it with the manufacturer's app and your own phone, both your phone and the device will have to be connected to the same network at some point.

Note that Radio Thermostat has since discontinued the mobile web app support for these thermostats. (which is exactly why I like these type of devices that have a "local" API so that when the 3rd party quits, the device is still useful)

from radiotherm.