Some of us in the family are logged into dashboards on our phones with different users, which update depending on which room we are in.
If you want to gate access to certain functionality on a dashboard designed for a common area, you would need to route to a different dashboard upon providing some kind of authorisation, e.g. an onscreen PIN pad.
Happy to discuss.
We didn't know you'd declared this. I hope there are temporary solutions available while your declaration is communicated to everybody else.
This thread is relevant. Their permissions system is just on entities, and isn't a real EBAC system.
As somebody with a pretty extensive Home Assistant based home automation system AND kids, I've never once felt the need for this. I can certainly see the utility of it, but Home Assistant is already complicated enough. I'd prefer effort be spent improving the UX, simplifying the system, improving reliability and adding more (optional) integrations.
Many, going back years.
Home Assistant users are the power users of the home automation world, but even among their user base I think the number of users who would use a full set of groups and permissions controls in their home is very small.
This is a feature that would take a lot of engineering effort and only make the product more complicated for most of their users. The part of their user base that did use it would probably never be happy because they wanted something even more specific.
Their basic permissions and control structure covers most of the common use cases. Going further would be 100X more work for something that would only be used by a very small minority of users.
These days if you build it with a central policy engine, e.g. on top of Open Policy Agent with Rego as a policy language, and stick to a (actor, object, action) triple system, you can build an extensible and powerful authorization system that usually also is less polluting to the codebase as many other approaches. For HA specifically, where you have a quite low numbers of actors and objects, most of the headaches that could come with such a system in terms of scaling also fall away.
I do think the maintainers are getting better about it. The releases over the past year have reworked a lot of things to be more intuitive for casual users while also being more flexible for power users, but there is still a lot of ground left to cover.
I think with the growing popularity, and expansion of fields of use, this is something they'll ultimately have to reckon with. I've seen quite a few posts on the the HA subreddit, where it's being used for controls in e.g. hotels or other bigger buildings, because it has a great feature set and prevents vendor lock-in. There is no harm in also catering to those people & organizations.
Apparently they're saying this is the wrong way to run a cloud.
https://www.reddit.com/r/homeassistant/comments/1vxw5pu/acce...
Build that and I'll be interested.
I get that they are trying to market this but it is a bit disingenuous.
- Offsite Backups
- Voice control (Alexa & Google Home)
- Voice Processing (STT/TTS)
- Better media streaming (video/audio)
In addition to dedicated support, as part of their free Cloudflare tunnels.
Sorry for being snarky, but given the tone/point of the announcement is anti-big tech it's funny to complain that the pricing is so high compared to big tech.
Taken on its own, for the price of a nice coffee a month you also support Home Assistant development and get something in exchange. Pretty good value.
HA already has many plugins for doing voice processing locally or through other cloud providers (freely or cheaply)
A cloudflare tunnel would also give you direct access to WebRTC streams, just like being at home. HA Cloud just offers relay servers so you don't have to directly connect.
If you want to give HA money, go ahead but there's nothing truly compelling it offers that I couldn't get elsewhere for much less.
Might as well add 9000 at the end of it.
I've been working on a small project running mitmproxy on a lot of 'privacy-focused' baby-tracking apps and only one of the ones I've tested doesn't send back a bevy of analytics data (none of which they openly promise to anonymize)
some of the worst culprits had things like the Facebook SDK and Google Ads installed and sending data in spite of literally promising not to generate an Ad ID and three (Baby+, Nanit, and Pregnancy+) straight up had Microsoft Clarity sending data (ie basically screen recordings and full input logs)
Also, surprised with Nanit, Microsoft Clarity was found on the phone app?
With the whole LG fiasco I wouldn't be surprised if the camera itself was doing network fingerprinting and data collection.
and a really obscure and clearly vibe-designed one (that still works fine) that only fired off a single Firebase call noting an install: https://play.google.com/store/apps/details?id=com.mimiapp.mi...
one caveat is that I haven't done anything like longterm use testing - just account setup and a handful of inputs like a specific feed time and amount, etc. if these apps are firing off data with delayed intervals, I wouldn't have captured it
longer results file here (in a very rough-draft, vibe-written state): https://github.com/weijia-89/baby-app-audit/blob/main/FINAL-... and the nanit network log is here: https://github.com/weijia-89/baby-app-audit/blob/main/result...
I know I have a few anti-AI haters on HN, but hear me out. I'm currently using Opus 5.5 to create 100% pure-Rust, immediate mode rendering, open source implementations of Adobe's entire suite:
https://github.com/storytold/photocraft (Photoshop)
https://github.com/storytold/vectorcraft (Illustrator)
https://github.com/storytold/filmcraft (Premiere)
https://github.com/storytold/lightcraft (Lightroom)
https://github.com/storytold/printcraft (Acrobat Pro)
https://github.com/storytold/effectcraft (After Effects)
https://github.com/storytold/designcraft (InDesign)
I got bit by the dark pattern "cancellation fee" one too many times.
AI lets us take back tech and set the clock back to the pre-shitty era. But now you can just create 1:1 functional equivalents, clean room, that are highly performant and cross-platform. Nothing is stopping you.
We'll replace Google Search, we'll build our own smartphones, we'll build better infra. We'll remove all the ads and de-enshittify the entire tech world.
Big tech sowed the seeds of their own commodification with AI. It's all going to come down now that we can rebuild everything without toiling for years to even get close to scaling software capability moats.
The internet is going to reset to 1990-2004 (pre-facebook / "web 2.0" era). The indie web era. Everything is going to be reborn as open source.
We're going to own it all.
We don't even own the AI that is building all of this.
Changing the name to distance yourself from AWS and Google Cloud is fine, but "Link" doesn't really tell you anything about where it's hosted or that you still have to pay for it. In fact, by announcing this change with the specific goal of distancing yourself from Big Tech it kind of implies that you're no longer a paid service that happens in some remote data center.
But whatevs. Words don't actually mean anything anymore anyway.
They never did.
Well, except in France, they get really mad about that.
But in this case it’s a misnomer. The Home Assistant instance is not in the cloud, but local. The core service of Nabu Casa Cloud is making it remotely accessible. So Link is actually a better name.
Nabu Casa also hosts e.g. STT/TTS services for a HA to use. Again this is easy to replace with something else and entirely optional to begin with, but since I trust Nabu Casa more than, say, Google and don't have the hardware for local models I like to use them.
Not sure why they dramatise it so much. Want a corporate rebrand, have at it. The like changing things, I get that.
We are talking about what the cloud means to an entirely different segment of the population to you and me.
You can’t install Home Assistant without DockerHub, and it fetches all sorts of stuff from cloud hosters during use.
HA is offline first, but they don’t really take privacy or data hygiene seriously; it shouldn’t talk to the internet at all until and unless you configure it to do something that needs internet. That isn’t the case today, you can’t even install it without internet.
Azure and AWS have become practically a racket. I haven't seen a single "cloud native" company yet that is not leaking hundreds of thousands of dollars per month to the US digital monopolists.
Cloud capitalism at its finest..
Stanley Kubrick must be chortling in his grave.
Not to mention it's a highly unused feature. Most will use HASS on a home LAN in a self-hosted environment with no directly connectivity (unless you're insane), behind a VPN, which is the only correct way to do it.
...and if they forget that, they can just edit the source code in command.com!
In the age of agents everywhere this is no longer true or viable.
It's going to be hard for them to do it, for historic and legacy code reasons. But it's long past being a choice and now becoming a need.
Regardless, they also call out that what they offer is only an enhancement and if you use it as the only way to access your smarthome then you are not really using the software as intended.
We will see in 12 months if the migration was worth it. Nabu Casa is starting to push harder into B2C so we shall see if the product can keep up with the demand.
Link is completely optional and does not affect the functionality of home assistant. You can run completely offline without a subscription of any kind on your own hardware if you so choose.
I find the downvotes without comment fascinating. Everything I posted was relevant and completely factual. I can only assume it’s people that have literally no idea what home automation is and what cloud is in this context. Cloud doesn’t and has never meant hyperscaler, and where it is hosted is completely irrelevant to the discussion.
That's not too far from owning it.
Hasn't it meant that for many decades now? Originating as a cloud symbol on network diagrams, but not long after used as a word when people wanted to talk about said diagrams. I certainly remember using it in the 90s, so it has meant that for at least that long. You make it sound like we've only recently come to this determination.
You’re more than welcome to host your own or use a vpn or stick it behind cloudflare.
Cloud does mean something in home automation, and that meaning is generally: you must pay a monthly subscription or the product is degraded or doesn't work at all (looking at you wink). This isn’t that.
mococa•1h ago