Working as well and being secure are two different things. Smart devices are computers that connect to the Internet, and devices that no longer receive security updates are attack vectors.
From a SecOps standpoint, it’s perfectly reasonable to block such devices from hitting your servers.
These thermostats still work as thermostats, you just can’t use the cloud service.
I see you’re getting downvoted but it’s a reasonable take. I fired from the hip thinking this was like most IoT garbage these days that is bricked without a connection to the server.
Working as well and being secure are two different things. Smart devices are computers that connect to the Internet, and devices that no longer receive security updates are attack vectors.
From a SecOps standpoint, it’s perfectly reasonable to block such devices from hitting your servers.
These thermostats still work as thermostats, you just can’t use the cloud service.
Then they should give users a way to replicate the lost features on their own server. That’d be the user’s own risk.
I know that no company does that. Doesn’t make it right.
Don’t buy IoT bullshit, kids.
TP-link does. My Kasa devices work completely locally.
Also, you can get (certain) dirt cheap Tuya based devices and flash tasmota on it. Esphome is also a possibility.
I build most of my own smart devices, though.
I see you’re getting downvoted but it’s a reasonable take. I fired from the hip thinking this was like most IoT garbage these days that is bricked without a connection to the server.