HTTP Security Filter

WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /hacsfiles/../../.storage/auth

Anybody else see this at all? I know it’s related to the filter put in as a result of the recent security bulletin but I have no idea which integration I’m using that might have caused this log entry. I rather doubt it is HACS causing it and I’ve only seen it once.

Cause for concern?

I’ve seen one or two reports in my log.

The fact that people are out there trying to exploit this old vulnerability is a concern. That fact that it was filtered is reassuring.

Still thinking of moving to a VPN.

1 Like

Well glad I’m in good company! I guess with any group of people you’re going to find a few (or more) that just suck. I’ve also been considering using Wireguard (seems like the easiest to set up and maintain) but I have to wait until my Blue arrives. My poor old RPi3 has already working overtime for a while now.

Thanks for the reassurance tho. You’ve stopped me from running outside and hacking up the fibre line! :stuck_out_tongue_closed_eyes:

Are you exposing yourself? Or nabucasa?

I don’t expose my self anymore, after the police nearly caught me that one time.

But seriously, DuckDNS.

1 Like

The judge told me I couldn’t do that anymore. :upside_down_face:

I do use NabuCasa but I also have to leave 8123 forwarded because NabuCasa is blocked at work.

Opportunity: WorkAssistant

We already have this at my work!

“Hey - Unpaid Intern! Shut off all the lights!”

Very cost effective and super easy to set up. A little high maintenance at times though.

2 Likes