I 'm wanting to get a thermostat that I can control remotely, either by openhub, or something I ...

[G+_Jason Kirk]

I'm wanting to get a thermostat that I can control remotely, either by openhub, or something I can do from a linux server I can VPN into if needed. I don't want a thermostat that connects to an external cloud server. IoT stuff constantly prove to be a security hazard and I don't want to rely on a internet connection to access it if I'm on the house network. Any ideas?

[G+_Eddie Foy]

IoT is the Internet Of threats.

Use a VPN.

I've seen people talk about IoT and "hey so a guy can turn off my Hue, or use my Ring to watch my grass grow"  But its a pivot point into your network.  I say hide all your cool stuff behind a VPN. and play away.  A single with a single non standard controllable point is the way to go.

 

10+ apps to control 15+ devices is asking for trouble.

[G+_610GARAGE]

The only thermostat that I know of that dosn't require a a cloud server is networkthermostat.com We installed around 40 of them into a building. You can use their cloud, or just run software on your own windows box. I can't remember if you can connect to the thermostat via a web browser, but I think you can.

 

Sad story, the building manager wanted to control the thermostat through the internet, securely. A long conversation with a tech from networkthermostat.com about how we could do this securly. He gave me some options (none of them good), then he said, but it is just thermostat, so it really doesn't matter if they get hacked. ????? I'm paraphrasing, but nobody in the IOT industry gets security yet. Maby when a building is trashed because the heat was turned off during winter and a bunch of pipes froze and burst. Maby then people will care. Until then, avoid IOT.

[G+_Jason Kirk]

Eddie Foy I'm not sure if that was a suggestion to me or a general comment, but I did mention a VPN. I'd either access my thermostat remotely that way, have my firewall limited to whatever IP I was connecting from, or setup some kind of web solution at home I can access with a password or maybe SQRL. And if my internet went down, at least I could access it locally. 610bob I'm not super concerned about people messing with my settings though it is on my mind. I'm more worried about the thermostat being a foothold into my network and I don't like the general idea of outsourcing my AC control. Thanks for the suggestion. I'll take a look.

[G+_Eddie Foy]

Jason Kirk yes it was a general comment overall.  VPN and you should be safe. (auth/creds/certs/etc. not withstanding)  I am a anti-cloud (there is no cloud, its just someone else's computer) and a huge IoT skeptic (awesome pivot point; linux failure).  But also love  the connection to home. (been a road warrior from before the Win95/OS/2 era)  Just worry about spreading it across many services/ports; its asking for trouble even with the '3 dumb routers" from SG.

[G+_Larry Havenstein]

Gee I thought IOT meant Internet of Thieves.

[G+_Curtis Stone]

Build your own! Raspbery pi + temp/humid sensor + GPIO wired to AC/furnace system = smart thermostat with linux server that won't be subject to attacks on mass market devices