I never authorized an integration that scans my secrets
Other (issue in content formatting, broken link or image, non-working widget)
以下正文同步自 Hacker News，版权归原站所有，已转换为易读排版。
Type of issue
Other (issue in content formatting, broken link or image, non-working widget)
Problem description
This is a pretty severe invasion of privacy. I never authorized any integrations or plugins for scanning secrets and sending them up the line, even if they are hashed or not. This mechanism could be abused by a malicious threat actor with access to the home assistant github repos in a variety of ways.
how do i turn this thing off?
Suggested solution
make this an opt-in feature, do not just opt people in to scanning for secrets with a system they were not aware existed.
URL
https://www.home-assistant.io/more-info/pwned-passwords/
Version
2026.10.1
How do you know the suggested solution is correct?
No response
Additional information
No response
正文由 探How 从来源站点 RSS 同步，内容未经改写；遇到排版缺失或需要图片、视频时请以原文为准。