Hacker News Reader

Comment by yborg | Hacker News Reader

https://www.forbes.com/sites/leemathews/2017/07/27/criminals...

You can be hacked from your doorbell, thermostat, or refrigerator now. Soon, hacks to vehicles will be able to propagate into home networks to install malware. It's an exciting time to be a cybercriminal...

View on HN

So what's a "best practice" if you ARE going to have these things in your home? Keep them on a guest network that doesn't have access to your private network? (with a separate device to control things)

I have a separate network for my IoT stuff - this network can access the internet, but cannot initate connections to my main network[0]. My main network can initiate connections to the IoT network. The Hue bridge works fine, with the default app, in this setup.

My main control device is a VM running Home Assistant, so the underlying system (Hue and TRÅDFRI mainly) doesn't really matter much.

[0] Mostly. There's a port open for one device to do HTTP POSTs of data to one machine on the main network. MQTT is also open so that my ESP32/ESP8266 stuff can push data to the broker.

This seems really nice! May I ask how you set it up? Is it a question of configuring routing, a firewall, or both? Does it matter if you have separate or a shared subnet?

I have some router with Shibby Tomato laying around (DD-WRT is unsupported), but I'm not sure if I need some other hardware, software, or if it's just a matter of finding the right settings…

Reply on news.ycombinator.com