Home Assistant stores bearer tokens in cleartext; a password change revokes none

2 comments

• akerl_ 10 hours ago

  Is this just a purely AI-slopped blogspam stealing content from a public audit report on Home Assistant?

  [-]
  • akerl_ 9 hours ago

    Wow, the plot thickens. This is AI slop generated by reading an AI slopped oss-sec report: https://seclists.org/oss-sec/2026/q4/578