Fusion/Sicherheit und Datenschutz/en
Dies ist die englische Fassung. Zur deutschen Fassung
The Fusion runs in your home network, without an account and without a cloud. This page shows how it protects itself, what you should do yourself and which connections it makes to the outside.
Protection in the home network
- Host and origin check: Requests to the web interface must go to the IP address or the name of the device (
wettercube-fusion.local). Writing requests from a browser are only accepted from the device's own page. This stops a foreign website in the browser of some device on your home network from changing settings or starting updates. - Password for the web interface (optional): Under System → Password for the web interface you can set a password (at least 6 characters, user name admin). The device then asks for it when the page is opened. The read interfaces
/api/next(for the Next),/api/ampel(for the WetterAmpel) and/api/status(for Home Assistant) stay open. After eight wrong logins access is blocked for a minute. - Forgot the password? The recovery app has the choice "Web-Passwort entfernen" (remove web password). It only deletes the password; Wi-Fi, sensors, settings and firmware stay. This only works with the device in your hand (see Recovery). Afterwards you can set a new password.
- Setup Wi-Fi with a password: The Wi-Fi "WetterCube-Fusion-Setup" is encrypted (WPA2). The password (8 digits) is shown on the display and changes with every setup mode. Someone who is merely within range cannot read what you enter. (WPA2 requires at least 8 characters, so it cannot be shorter.)
What you should do yourself
- The device belongs in your normal home network, not in a guest Wi-Fi, and must never be made reachable from the internet through port forwarding.
- Set a password if other people or many smart devices share the network.
- Keep the firmware up to date (see Updates). If you switch updates off, no security updates arrive either.
Limits you should know
- The web interface uses HTTP, not HTTPS. The password also travels unencrypted over your home network. It protects against access from other devices and foreign websites, not against someone who reads the network traffic.
- Wi-Fi password, MQTT password and ntfy token are stored unencrypted in the device's memory. Anyone who holds the device physically can read them.
- Firmware updates come over HTTPS with a verified certificate from GitHub, but still without a signature of their own. A firmware signature is planned.
- An MQTT connection to your broker is unencrypted in the home network.
Which connections does the device make?
The device sends nothing to the developer: no account, no statistics, no ads. It only connects to these services:
| Service | Purpose | What is transmitted | When |
|---|---|---|---|
Open-Meteo (api.open-meteo.com, air-quality-api.open-meteo.com, geocoding-api.open-meteo.com) |
weather, forecast, air quality, pollen, place search | the coordinates of your location (the name when searching a place), plus the IP address of your connection | regularly |
German Weather Service (opendata.dwd.de, maps.dwd.de) |
warnings, Biowetter, 3-day pollen, warning map and radar | the request with the chosen region, plus the IP address | regularly |
GitHub (raw.githubusercontent.com, jppeterson-lab.github.io) |
update check and download | the IP address | only if updates are not "off" |
ntfy (default ntfy.sh, or your own server) |
phone messages | title and text of the message, for example "Sensor-Alarm: Küche Luftfeuchtigkeit" with value and limit, and your topic | only if switched on |
Time servers (pool.ntp.org, time.cloudflare.com, time.google.com) |
time of day | the IP address | at start and occasionally afterwards |
| MQTT broker, Home Assistant (your own server in the home network) | sensors and switches | sensor values and switch commands | only if set up, only local |
About ntfy: The content of the messages lives on the ntfy server, so with ntfy.sh on a third party's service. The operator and anyone who knows your topic can read them. So choose a long topic that cannot be guessed (it works like a password) or run your own ntfy server. Using it is voluntary and off by default.
More notes on liability and use: usage notes. Please report security problems confidentially as described in SECURITY.md.