Careful what you open to the world

[helloworld]

I was just auditing my system for extra open ports I no longer needed open and decided to check out shodan.io and found an alarming number of people had some sensitives ports open without any authentication…

I saw people with port 445 open without any authentication, security cameras, home assistant without auth, ssh without keys, etc.

Port 445 is SMB/Samba so anyone can connect and depending on file permissions read/delete files and see any and all secrets and configuration files.

So please users check your network configurations and only open what you need.

Check your network with shodan.io or with GRC.

[hijinx (James)]

This is a great post to help you lock down your HA:

Best Way to Protect from Hackers?

The best way? Depends how savvy you are, family approval factor, and how much pain and suffering you are willing to put up with. The internet is a dangerous place for anyone, especially your house and private lives. If you don’t really know what you are doing, a VPN is usually a great first step instead of exposing HASS to the internet. My current setup consists of, following the flow of a packet from Internet -> Cloudflare -> Firewall -> NGINX -> HASS: Hosted DNS, TLS/Certificate, and proxi…

[hijinx (James)]

Yeah, searching for “homeassistant” shows a bunch of open SMB and MQTT servers:

https://www.shodan.io/search?query=homeassistant

Also open HA instances (per the search terms from HA docs - here)

https://www.shodan.io/search?query=Home+Assistant