Depends on what aspect you’re referring to. I’m sure the online accounts are following standards, and the hue bridge can be used locally or via the cloud account. Local LAN generally doesn’t have any restrictions on usage, anyone on your net with the app can control stuff from my experience. Maybe that’s changed.
The bridge goes out to the Internet, it works without port forwards, so no exposure to the Internet there.
The last point I would think about with security is local bridge-to-bulb security which… Probably isn’t great. But someone needs to be within range with a specific skillset to take advantage of that.
I work in tech and maybe know one guy who might be able to pull that off?
Not sure, it’s ZigBee, and I don’t think they have encryption turned on at all.
How’s the security on those light bulbs is a weird but valid question
Depends on what aspect you’re referring to. I’m sure the online accounts are following standards, and the hue bridge can be used locally or via the cloud account. Local LAN generally doesn’t have any restrictions on usage, anyone on your net with the app can control stuff from my experience. Maybe that’s changed.
The bridge goes out to the Internet, it works without port forwards, so no exposure to the Internet there.
The last point I would think about with security is local bridge-to-bulb security which… Probably isn’t great. But someone needs to be within range with a specific skillset to take advantage of that.
I work in tech and maybe know one guy who might be able to pull that off?
Not sure, it’s ZigBee, and I don’t think they have encryption turned on at all.
Quick Google search shows that ZigBee is encrypted. So it may not be that insecure.
Yep, I see that too. Looks like it’s baked into the protocol.
Zwave will let you disable encryption or run without it. But it’s definitely still an option for zwave.
Both use AES 128, so there shouldn’t be any significant difference in security between them.