Hello community,
I wanted to bring attention to some security issues I’ve identified with Govee devices, specifically the H5075 model. It appears that these devices broadcast data unencrypted, making it accessible to anyone who installs the Govee app. Even historical data is openly visible. This poses a significant security risk, and I’d like to discuss potential solutions and alternatives.
-
Remote Binding and Home Assistant Compatibility:
The Firmware allows binding Govee H5075 to an app without physical presence. This renders them unavailable to Home Assistant and may cause issues with functionalities such as thermostat control. -
Privacy Concerns with Humidity Changes:
The ease with which one can determine whether someone is at home based on humidity changes raises serious privacy concerns. This information could be exploited by malicious actors.
Is there a way to enhance the security of Govee devices, such as implementing encrypted data transmission or locking down the broadcast to authorized users? If not, are there reliable and affordable alternatives to the Govee H5075 that prioritize user privacy and data security?
Thank you for your time and expertise!
Oliver