As a reminder, someone who is not the author of a project has no way to do a disclosure.

@zingo@sh.itjust.works it would be good to add [AIP] though.

Please refer to rules 7&8. The tag must be included in the title, with a disclosure if applicable.

Thanks!

I'm into this as a regular thing!

Pinned, I think a lot of us really enjoy seeing what others have been doing to take back and make improvements to our own setup.

Review rules 7 & 8. Missing title tag (not flair, it must be part of the title) & disclosure if applicable.

Locked in the meantime, send a message when you've addressed.

The title requires a tag.

Please review rules 7 & 8

https://lemmy.world/post/48725669 https://lemmy.world/post/49151085

Edit: Yes, [AIP] is the correct tag.

Please update with tags and disclosure as required, per rules 7 & 8

Its never DNS! Unless it is, which is almost always.

Because a lot of us watch things that cant be found easily, or home movies, or prefer to have it readily available at any time.

There are many reasons. Dont assume your use case is the only one.

Definitely a new one for here...

That said, your post is missing the [AIT] tag - AI Topic. Please update asap.

Edit: Locking until updated.

TL;DR:

• No, your passwords/secrets have not been shared anywhere.
• This is a long-standing feature and has been discussed in HA forums before.
• You can turn it off, but that is generally not recommended.

This post has been reported for misinformation.

I agree due to how its phrased by OP, but its not completely off base in that HIBP is used, but it is a severe misunderstanding of how. So I'm going to leave it up for awareness, while adding some notes and a few quick links here.

A quick quote from HA:

Your secrets are never sent anywhere. The check uses an algorithm called K-Anonymity that makes sure the service never sees your password, not even its complete hash. Your secrets and privacy stay protected.

The check is on by default. If you prefer not to run it, you can turn it off using the command line:

ha security options --pwned=false

To turn the check back on again, run:

ha security options --pwned=true

In short - HomeAssistant has never shared your passwords anywhere. HomeAssistant shares a part of a hash. In no way, shape, or form does this expose your passwords/secrets.

1. HA Page on Pwned passwords and secrets
2. HaveIBeenPwned
3. k-anonymity

Please update your title with the appropriate tag and disclose as required for rules 7&8, any questions please send a DM.

I was pointing out that the word "enterprise" is not specific to size or income, and definitions for use will vary wildly.

So it needs to be a separate discussion.