Sharek326 wrote:With more and ore devices like Alexa, HUE, and Vera where third parties create skills that enhance the usage is it possible that malicious skills could be written.
That's why I don't use skills unless I know it's from a trusted source - but even then I'm pretty selective because you can do what you want with code and the user never knows. But I think that's mostly to protect privacy rather than hacking, the Node servers should pretty much prevent anyone from backtracking into your home but why tempt fate?
My Alexa has two skills: Hue and OurGroceries. HomeKit has one accessory: HomeKit Bridge/Homebridge. I wouldn't use Google Assistant if my life depended on it and Cortana, well, she's cute isn't she? She tries so hard and fails so hard.
You can be absolutely paranoid about it all if you choose. In that case don't use a plugin either because what has more access to your network and computer than an Indigo plugin? And what about Chinese camera manufacturers that have built in back-doors that have been repeatedly used by hackers? Stop buying cameras. There are a lot of folks making Z-wave devices, who knows what's happening there, better stop that too.
In the end you have to mitigate your exposure based on your comfort level and your level of paranoia. Turn it all off - that's the only way to protect yourself, otherwise just don't be dumb about things. Have a strong security policy for your home, data, emails and everything and you'll like be fine. I don't have any two things on the web or in my home that have the same password, good luck hacker.
I'm not paranoid, everyone's out to get me and I know it.