Home Assistant: the password is not the key – token secrets in cleartext(seclists.org)
5 points by atriix | 0 comments
Full Disclosure mailing list post reporting that Home Assistant stores token secrets in cleartext, has non-expiring tokens, and doesn't revoke tokens on password change.