A random person on lemmy. Banner art from Deemo switch version

Alt lemmy @Deemo@lemmy.world

Alt kbin: @Deemo@fedia.io

FMHY (archive): @Deemo@lemmy.fmhy.ml

  • 4 Posts
  • 16 Comments
Joined 1 year ago
cake
Cake day: July 20th, 2023

help-circle













  • remote UI connection passes through the Home Assistant Central servers, the Central servers could maintain that safety database and off switch

    I think this is how home assistant handles it. When they put out a cve they can update the insecure version list which makes nabucasa refuse remote forwarding (until you update).

    Initially I was just thinking if a open-source project is on github and uses the security disclosure feature if it would be possible to pull data from it and disable remote acess (either by auto shutting down the service or simply disabling routing on a reverse proxy).

    Having a system that does without a security disclosure list from a project maintainer would be far mor difficult like having the proxy disable one of your services if it detects a vulnerability in a dependency.








  • The problem comes down to education institutions. I remember when we got Chromebooks in my highschool (8 years ago) admins forgot to turn of developer mode and half the school unenrolled the Chromebook managing to bypass all restrictions. This went on for half a year until one day our school needed to run a state exam (more for measure of schools performance not as a college entrance exam or anything).

    The computerized testing program required deploying a specific chrome app accessible when chrome book is logged out (can’t just download from chrome web store). When they tried to push the client since half of Chromebooks were unenrolled it failed. This required the school it to recall pretty much all chrome books to manually re enroll all of them and disable developer mode (prevents unenrolling and prevents sideloading Linux).

    Problem is if older Chromebooks are used for Linux in an educational environment there would be nothing stopping a student from whipping up a bootable USB and dumping another distro (bypassing restrictions). I’m also not sure if there is a enrollment mode equivalent Linux (there may be but not sure).

    At least that’s my two cents (not a school it admin just a memory from the past 😉).