In the Notes towards the end of the description you write "...the initialization process ("SmartConnect") leaks the user's WiFi credentials".
That sounds like a critical security issue at first and in general it's always a bad idea to hand out credentials without any prior authorization.
But to be able to receive that response from the mi-home device I already need to be logged into the very same Wifi-network, i.e. I already need to know exactly those credentials before-hand. I thus fail to see the criticality here.
Or what I am missing here?
In the Notes towards the end of the description you write "...the initialization process ("SmartConnect") leaks the user's WiFi credentials".
That sounds like a critical security issue at first and in general it's always a bad idea to hand out credentials without any prior authorization.
But to be able to receive that response from the mi-home device I already need to be logged into the very same Wifi-network, i.e. I already need to know exactly those credentials before-hand. I thus fail to see the criticality here.
Or what I am missing here?