From 93b8ebfd14d0b67ed2eb233301fe21b984030450 Mon Sep 17 00:00:00 2001 From: Artem Sheremet Date: Mon, 16 Jan 2023 09:31:36 +0100 Subject: [PATCH] Move Somfy IDs into secrets They add entropy bits which can be used as an attack vector. --- blinds.yaml | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/blinds.yaml b/blinds.yaml index 4221d59..69df13e 100644 --- a/blinds.yaml +++ b/blinds.yaml @@ -15,6 +15,11 @@ mqtt: broker: mqtt id: mqtt_client +globals: +- id: somfy_remote_id_base + type: int + initial_value: !secret somfy_remote_id_base + cover: - platform: custom lambda: |- @@ -22,7 +27,10 @@ cover: std::vector blinds; for (int i = 0; i < 13; ++i) { - auto cover = new SomfyRTS(rfPin, 42420 + i, id(mqtt_client)); + auto cover = new SomfyRTS( + rfPin, + id(somfy_remote_id_base) + i, + id(mqtt_client)); blinds.push_back(cover); App.register_component(cover); }