I have recently enforced a better privacy practice for my smart home devices, that includes creating a new access point for those devices and blocking them of internet access with VLAN.

Since then, my yeelight minas celiing lights goes unavailable whenever I physically switch them off and turn them on afterwards.

One really stupid thing is it needs internet access for using LAN control feature. it’s really really dumb.

but at the same time, in this kind of age where everything wants to phone their home, i need to somehow mitigate this in every possible way such as by fooling the devices as if they have access to the internet.

Is this kind of things possible?

thanks!

  • RheumatoidArthritis@mander.xyz
    link
    fedilink
    English
    arrow-up
    19
    ·
    8 days ago

    Go zigbee! I was very hesistant running a second wireless network next to wifi, but it’s widely supported and totally cloud-free

    • wildbus8979@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      3
      ·
      edit-2
      8 days ago

      Yeah really. I keep hearing these tales of issues with poor network and what not…

      I have literally over 120 devices in my network. Ranging from the cheapest Tuya door/windows sensors I could find (cause I needed thirty+!) to innovelli switches and it just works fantastic. HamGeek PoE concentrator. My only complaint it not being able to control the mesh more (tell certain devices not to be routers, force certain routes for end devices so they don’t use routers that go down when the power is out). I will probably remedy that by adding a second concentrator.

      That’s not to say wifi with ESPHome.and Tasmota aren’t great. Far more powerful and flexible, and with a quality AP it can also support a ton of devices, I have easily four dozen devices running with no issues.

    • tiz@lemmy.mlOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      8 days ago

      I understand the benefits of zigbee. However, its regional availability is poor. In my country acquiring zigbee hub(?) without going for sketchy options is not feasible.

      • petersr@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        8 days ago

        What is a sketchy option?

        I just bought a Sonoff Zigbee Dongle Plus E and use ZHA and it works like a charm. No third party cloud based coordinator. I guess you still have to trust the firmware of the dongle, but that is about it.

        • tiz@lemmy.mlOP
          link
          fedilink
          English
          arrow-up
          2
          ·
          7 days ago

          I simply have not access to zigbee dongle except for on sketchy Chinese websites. I usually buy those kinds of devices from Amazon.

          • petersr@lemmy.world
            link
            fedilink
            English
            arrow-up
            2
            ·
            7 days ago

            I mean - the ones you can buy from Amazon are the same you buy from Aliexpress, just more expensive. Of course, one could fear that some of them have failed QA or whatever - but I would not have much reason to suspect malicious firmware - and if you do, you can flash your own. You do that anyway if you want to use the dongle as a Zigbee router (instead of coordinator).

  • hoshikarakitaridia@lemmy.world
    link
    fedilink
    English
    arrow-up
    12
    ·
    8 days ago

    That sound really a hard to do.

    Basically you have to formulate the right responses that this device is looking for when it is communicating over the Internet.

    My only idea is maybe you can capture the device’s request and response using Wireshark and then use a dummy server to repeat it. If the device is using encryption layers that’s basically impossible iirc.

    • tiz@lemmy.mlOP
      link
      fedilink
      English
      arrow-up
      5
      ·
      8 days ago

      Ikr. I hope it’s just icmp ping to whatever address or smth. I don’t have in-depth knowledge of wireshark so might be a tough journey

      • SayCyberOnceMore@feddit.uk
        link
        fedilink
        English
        arrow-up
        6
        ·
        8 days ago

        Wireshark is the best way as it’ll show you exactly what’s going on; DNS addresses, traffic type, etc. (But not inside encrypted packets)

        But to do that it (you) need to see all the traffic between the ceiling light and the internet, so if you’re on wifi and it’s on wifi, that won’t work.

        Hopefully your router has the ability to either do a packet capture, or, mirror traffic to a physical port.

  • groet@feddit.org
    link
    fedilink
    English
    arrow-up
    8
    ·
    7 days ago

    Yeah I think the right response is to return the lightbulb and get a new one. One that doesn’t require an internet connection. Build some market pressure in the direction of offline appliances

  • TVA@thebrainbin.org
    link
    fedilink
    arrow-up
    6
    ·
    8 days ago

    For a camera I’ve got that I don’t care too much about, I had to give it a ~50KB network connection out and then it gets its handshake, but, doesn’t have a good enough connection to actually upload video and then all the local features stay working. Eventually, I’ll replace it, but, it’s monitoring a place that I don’t care about too much, so, it’s low on the priority list.

    Unfortunately, a light doesn’t need much in the way of a connection to begin with, but, if it needs some kind of handshake, maybe you can watch the traffic with Wireshark and whitelist that specific traffic or see if someone else has done the work for it (a quick search didn’t show anything for me, but, I haven’t gone in depth or anything)

    • tiz@lemmy.mlOP
      link
      fedilink
      English
      arrow-up
      4
      ·
      8 days ago

      Limiting the bandwidth for the VLAN zone could be really interesting. Thanks for the insight

  • atrielienz@lemmy.world
    link
    fedilink
    English
    arrow-up
    6
    ·
    8 days ago

    I seem to recall that a guy did do this once with a Google chromecast but he was a professional IT security of some kind, and that was years ago.

    I seem to recall that same year reading about a network engineer who used their homes nest thermostat to stop his wife from sleepwalking to the kitchen to eat and ruining her diet.

    It’s not that I think it can’t be done, it’s just that I think it might require you to either spoof responses or change the the firmware in some way.

  • k4j8@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    8 days ago

    I have this issue with my Hisense TV. I just want to use Jellyfin and it works offline… for a while. After several days without internet, it wants to reconnect to use any apps.

  • fubarx@lemmy.world
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    1
    ·
    8 days ago

    Matter is supposed to solve this problem. Unfortunately, a lot of implementations still phone home, at least during provisioning.

    • tiz@lemmy.mlOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      8 days ago

      Yeah matter over WiFi is crazy good even with home assistant! I love those devices. I hope I can get my hands on if I’m financially successful lol

  • socphoenix@midwest.social
    link
    fedilink
    English
    arrow-up
    1
    ·
    8 days ago

    You would need to figure out what it’s communicating with the server and replicate that, so at best this would need a per device (Ie wiz bulbs vs yeelight would be different) solution and would be a massive pita to figure out.

    Is there a reason you need to turn them off at the switch instead of turning them off with the WiFi control?