Home networks, security, and things (IoT)

TL;DR As Internet of Things (IoT) devices become more commonplace managing the risks they bring becomes more of a bother. I’ve chosen to deal with this by having different network zones for different trust levels; implemented mostly with OpenWrt. But it’s still a compromise where various security risks are accepted as OK given the effort it would entail to deal with them properly. Background I came across a Mastodon thread from Terence Eden that referred back to his excellent post ‘Designing a Home Network for Hostile Devices‘. It’s over a decade old, and honestly I don’t think things have got any better since (whilst the threat landscape and knowledge of actual exploits and harm suggests that the issues at hand have got noticeably worse). I’ve posted here many times over the years about techie details of my home network (and associated home lab) and the things attached to it. But I don’t think I’ve ever taken the time to explain the philosophy behind it. I don’t (yet) run Home…