Mod alt of @[email protected]

If you need to DM me, please reach out to me there, this account is primarily for dealing with reports.

  • 0 Posts
  • 84 Comments
Joined 4 months ago
cake
Cake day: June 6th, 2026

help-circle
  • curbstickle_lw@lemmy.world
    shield
    MtoSelfhosted@lemmy.world•PSA to Home Assistant users
    link
    fedilink
    English
    arrow-up
    16
    arrow-down
    1
    ·
    edit-2
    3 hours ago

    TL;DR:

    • No, your passwords/secrets have not been shared anywhere.
    • This is a long-standing feature and has been discussed in HA forums before.
    • You can turn it off, but that is generally not recommended.

    This post has been reported for misinformation.

    I agree due to how its phrased by OP, but its not completely off base in that HIBP is used, but it is a severe misunderstanding of how. So I’m going to leave it up for awareness, while adding some notes and a few quick links here.

    A quick quote from HA:

    Your secrets are never sent anywhere. The check uses an algorithm called K-Anonymity that makes sure the service never sees your password, not even its complete hash. Your secrets and privacy stay protected.

    The check is on by default. If you prefer not to run it, you can turn it off using the command line:

    ha security options --pwned=false
    

    To turn the check back on again, run:

    ha security options --pwned=true
    

    In short - HomeAssistant has never shared your passwords anywhere. HomeAssistant shares a part of a hash. In no way, shape, or form does this expose your passwords/secrets.


    1. HA Page on Pwned passwords and secrets
    2. HaveIBeenPwned
    3. k-anonymity
















  • curbstickle_lw@lemmy.worldMtoSelfhosted@lemmy.world•*Permanently Deleted*
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    1
    ·
    10 days ago

    but i will only hate/judge/completly ignore programms/tools/documentation thats clearly vibecoded slop.

    If its disclosed and tagged, then keep that thought to yourself - its now OT (rule 3) or potentially a rule 1 violating comment depending on how its phrased. In either case, its not appropriate for the post.

    If its not disclosed and/or tagged, report it.


  • Don’t disclose - slop

    “Don’t disclose” means report, not commenting.

    Disclose with AIP - not specific enough, still assume slop

    Not specific enough because it requires a disclosure, any comments of “slop” should be reported not interacted with.

    Disclose more specifically - “slop”

    “Slop” with an appropriate disclosure is a rule 1 violation. Report.