2026-10-16 19:49 UTC
hey @homeassistant@fosstodon.org
what the fuck
https://github.com/home-assistant/home-assistant.io/issues/49314#issuecomment-6222899100
Replies (2)
-
@gayint@infosec.exchange 2026-10-16 21:11
@Viss@mastodon.social @homeassistant@fosstodon.org :ablobcatpopcorn:
-
@Viss@mastodon.social 2026-10-16 20:00
this is unacceptable HA is sending credentials up the line without opt-in, and their head dev refuses to acknowledge that this is a problem. this is the ssh xz issue all over again. someone is gonna drop code into HA to abuse this mechanism and its going to be a big ugly disaster. stop updating home assistant immediately