View Single Post
Old 09-20-2018, 08:44 PM   #4
haertig
Wizard
haertig ought to be getting tired of karma fortunes by now.haertig ought to be getting tired of karma fortunes by now.haertig ought to be getting tired of karma fortunes by now.haertig ought to be getting tired of karma fortunes by now.haertig ought to be getting tired of karma fortunes by now.haertig ought to be getting tired of karma fortunes by now.haertig ought to be getting tired of karma fortunes by now.haertig ought to be getting tired of karma fortunes by now.haertig ought to be getting tired of karma fortunes by now.haertig ought to be getting tired of karma fortunes by now.haertig ought to be getting tired of karma fortunes by now.
 
Posts: 1,912
Karma: 32620480
Join Date: Sep 2017
Device: PW3, Galaxy Tab A9+, Moto G7
As this "internet of things" spreads more and more, I would urge people to learn more about their router. You want to keep these "things" off the same network as your computers, laptops, etc. You have a major security hole if you allow these devices - that all use an internet connection - to be on the same network with your computers.

Investigate and learn things on your router to maintain separate networks. Often, router documentation will refer to this as a "guest network". More technically accurate terms might be "Virtual network", "Virtual LAN", or "VLAN". You also might see "Virtual WiFi".

The goal is to get all the IOT ("Internet of Things") devices off of your main network and isolated to a separate network where they cannot do you harm. This VLAN is where you should put your Alexa devices, your refrigerator, your thermostat, and all that other non-human stuff that uses an internet connection.

Some IOT devices are harder to separate from your home network (LAN). Things like a Roku or FireTV device. If you're running your own media server (Plex, etc.) then these streaming devices will need to access the network where your media server lives. Note that I didn't say they have to be on the same network necessarily, just be able "to access it". You can and should create very strict firewall rules so that you limit the activities these IOT devices can do when connected to your media server or whatever.

You most certainly don't want one of these cool Alexa devices on your home LAN (put it on a VLAN instead). Otherwise Amazon can come in remotely and access your LAN, and all your computers connected there. Even if you trust Amazon not to do that, do you trust the hordes of hackers who are no doubt trying to find a way into Alexa?

If you don't know how to address these massive security holes yourself, do some learning if technical enough, or find a computer geek friend who is knowledgeable about security to help you out.
haertig is offline   Reply With Quote