this post was submitted on 06 Dec 2025
28 points (100.0% liked)

homeassistant

18571 readers
39 users here now

Home Assistant is open source home automation that puts local control and privacy first.
Powered by a worldwide community of tinkerers and DIY enthusiasts.

Home Assistant can be self-installed on ProxMox, Raspberry Pi, or even purchased pre-installed: Home Assistant: Installation

Discussion of Home-Assistant adjacent topics is absolutely fine, within reason.
If you're not sure, DM @GreatAlbatross@feddit.uk

founded 2 years ago
MODERATORS
 

I have recently enforced a better privacy practice for my smart home devices, that includes creating a new access point for those devices and blocking them of internet access with VLAN.

Since then, my yeelight minas celiing lights goes unavailable whenever I physically switch them off and turn them on afterwards.

One really stupid thing is it needs internet access for using LAN control feature. it's really really dumb.

but at the same time, in this kind of age where everything wants to phone their home, i need to somehow mitigate this in every possible way such as by fooling the devices as if they have access to the internet.

Is this kind of things possible?

thanks!

top 23 comments
sorted by: hot top controversial new old
[–] RheumatoidArthritis@mander.xyz 21 points 2 months ago (2 children)

Go zigbee! I was very hesistant running a second wireless network next to wifi, but it's widely supported and totally cloud-free

[–] wildbus8979@sh.itjust.works 3 points 2 months ago* (last edited 2 months ago) (1 children)

Yeah really. I keep hearing these tales of issues with poor network and what not...

I have literally over 120 devices in my network. Ranging from the cheapest Tuya door/windows sensors I could find (cause I needed thirty+!) to innovelli switches and it just works fantastic. HamGeek PoE concentrator. My only complaint it not being able to control the mesh more (tell certain devices not to be routers, force certain routes for end devices so they don't use routers that go down when the power is out). I will probably remedy that by adding a second concentrator.

That's not to say wifi with ESPHome.and Tasmota aren't great. Far more powerful and flexible, and with a quality AP it can also support a ton of devices, I have easily four dozen devices running with no issues.

[–] RheumatoidArthritis@mander.xyz 4 points 2 months ago (1 children)

Your smart home has more computing power than my computer

[–] wildbus8979@sh.itjust.works 3 points 2 months ago

It's very possible, but on the bright side it's all local, no cloud garbage 😎

[–] tiz@lemmy.ml 1 points 2 months ago (2 children)

I understand the benefits of zigbee. However, its regional availability is poor. In my country acquiring zigbee hub(?) without going for sketchy options is not feasible.

[–] petersr@lemmy.world 1 points 2 months ago (1 children)

What is a sketchy option?

I just bought a Sonoff Zigbee Dongle Plus E and use ZHA and it works like a charm. No third party cloud based coordinator. I guess you still have to trust the firmware of the dongle, but that is about it.

[–] tiz@lemmy.ml 2 points 2 months ago (1 children)

I simply have not access to zigbee dongle except for on sketchy Chinese websites. I usually buy those kinds of devices from Amazon.

[–] petersr@lemmy.world 1 points 2 months ago* (last edited 2 months ago) (1 children)

I mean - the ones you can buy from Amazon are the same you buy from Aliexpress, just more expensive. Of course, one could fear that some of them have failed QA or whatever - but I would not have much reason to suspect malicious firmware - and if you do, you can flash your own. You do that anyway if you want to use the dongle as a Zigbee router (instead of coordinator).

[–] tiz@lemmy.ml 2 points 1 month ago

In my region, it’s near impossible to receive packages from Aliexpress bc their delivery service is not functioning. I’ve tried in the past. It’s sketchy not because the QC and all but because I can’t even receive the package while Amazon has never failed delivery at least.

[–] RheumatoidArthritis@mander.xyz 1 points 2 months ago

Then maybe next time you could buy devices supported by Tasmota

https://templates.blakadder.com/

As for the current yeelights - sorry, no idea

[–] hoshikarakitaridia@lemmy.world 11 points 2 months ago* (last edited 2 months ago) (1 children)

That sound really a hard to do.

Basically you have to formulate the right responses that this device is looking for when it is communicating over the Internet.

My only idea is maybe you can capture the device's request and response using Wireshark and then use a dummy server to fire the same response s back to the device inside your vlan l. You'd also need to set a DNS to reroute the traffic properly. If the device is using encryption layers that's basically impossible iirc.

Basically you are looking to set up your own very basic mitm for that device.

[–] tiz@lemmy.ml 5 points 2 months ago (1 children)

Ikr. I hope it’s just icmp ping to whatever address or smth. I don’t have in-depth knowledge of wireshark so might be a tough journey

[–] Cyber@feddit.uk 6 points 2 months ago

Wireshark is the best way as it'll show you exactly what's going on; DNS addresses, traffic type, etc. (But not inside encrypted packets)

But to do that it (you) need to see all the traffic between the ceiling light and the internet, so if you're on wifi and it's on wifi, that won't work.

Hopefully your router has the ability to either do a packet capture, or, mirror traffic to a physical port.

[–] groet@feddit.org 10 points 2 months ago

Yeah I think the right response is to return the lightbulb and get a new one. One that doesn't require an internet connection. Build some market pressure in the direction of offline appliances

[–] TVA@thebrainbin.org 7 points 2 months ago (1 children)

For a camera I've got that I don't care too much about, I had to give it a ~50KB network connection out and then it gets its handshake, but, doesn't have a good enough connection to actually upload video and then all the local features stay working. Eventually, I'll replace it, but, it's monitoring a place that I don't care about too much, so, it's low on the priority list.

Unfortunately, a light doesn't need much in the way of a connection to begin with, but, if it needs some kind of handshake, maybe you can watch the traffic with Wireshark and whitelist that specific traffic or see if someone else has done the work for it (a quick search didn't show anything for me, but, I haven't gone in depth or anything)

[–] tiz@lemmy.ml 4 points 2 months ago

Limiting the bandwidth for the VLAN zone could be really interesting. Thanks for the insight

[–] atrielienz@lemmy.world 6 points 2 months ago

I seem to recall that a guy did do this once with a Google chromecast but he was a professional IT security of some kind, and that was years ago.

I seem to recall that same year reading about a network engineer who used their homes nest thermostat to stop his wife from sleepwalking to the kitchen to eat and ruining her diet.

It's not that I think it can't be done, it's just that I think it might require you to either spoof responses or change the the firmware in some way.

[–] warmaster@lemmy.world 3 points 2 months ago
[–] fubarx@lemmy.world 2 points 2 months ago (2 children)

Matter is supposed to solve this problem. Unfortunately, a lot of implementations still phone home, at least during provisioning.

[–] Zwuzelmaus@feddit.org 5 points 2 months ago

I disagree. Matter is going to make things even much worse in this regard.

[–] tiz@lemmy.ml 1 points 2 months ago

Yeah matter over WiFi is crazy good even with home assistant! I love those devices. I hope I can get my hands on if I’m financially successful lol

[–] k4j8@lemmy.world 2 points 2 months ago

I have this issue with my Hisense TV. I just want to use Jellyfin and it works offline... for a while. After several days without internet, it wants to reconnect to use any apps.

[–] socphoenix@midwest.social 1 points 2 months ago

You would need to figure out what it’s communicating with the server and replicate that, so at best this would need a per device (Ie wiz bulbs vs yeelight would be different) solution and would be a massive pita to figure out.

Is there a reason you need to turn them off at the switch instead of turning them off with the WiFi control?