Nanoleaf: Difference between revisions - Consumer_Action

(3 intermediate revisions by 3 users not shown)

Line 1:

~~Nanoleaf is using GPL software in their smart home products based on OpenWrt and do not contribute back the GPL source code, or allow users to run their own software on their hardware.~~

~~Nanoleaf products are highly popular with many YouTubers using them in their backdrop.~~

https://forum.nanoleaf.me/forum/community-support/usage-of-openwrt-and-its-copyright-license

{{InfoboxCompany

https://www.reddit.com/r/Nanoleaf/comments/mbhudb/nanoleaf_aurora_run_linux_openwrt_and_nanoleaf_is/

| Name = Nanoleaf

https://forum.openwrt.org/t/nanoleaf-light-panels/81748

| Type = Private

| Founded = 2012

| Industry = Consumer Electronics

| Official Website = https://nanoleaf.me/

| Logo = Nanoleaf logo.png

}}

[[wikipedia:Nanoleaf|'''Nanoleaf''']] is a company that specializes in LED lighting, it was founded in 2012 and launched its first products with Kickstarter funding.<ref>https://www.crowdfundinsider.com/2014/09/48447-nanoleaf-bloom-dimming-bulbs-over-160000-during-final-days-on-kickstarter/</ref> Nanoleaf products are highly popular with many YouTubers using them in their backdrop.

==Anti-consumer practices==

===GPL violation===

Nanoleaf is using '''GPL-licensed software''' in its smart home products, which are based on '''[https://openwrt.org/ OpenWrt]'''. However, the company is not complying with the terms of the '''GNU General Public License (GPL)'''<ref>https://www.gnu.org/licenses/gpl-3.0.html</ref> by failing to contribute back the modified source code or allowing users to run their own software on the hardware.<ref>https://forum.nanoleaf.me/forum/community-support/usage-of-openwrt-and-its-copyright-license</ref><ref>https://www.reddit.com/r/Nanoleaf/comments/mbhudb/nanoleaf_aurora_run_linux_openwrt_and_nanoleaf_is/</ref><ref>https://forum.openwrt.org/t/nanoleaf-light-panels/81748</ref>

===Aggressive data collection===

Nanoleaf devices collect information about the network environment they are connected to and transmit this data to the manufacturer. This data collection is not disclosed during the device setup process. Since the device maintains a constant network connection via Wi-Fi, it operates continuously and sends metrics aggressively. This behavior was highlighted by members of the '''Pi-Hole community''', who observed that Nanoleaf devices were among the top consumers of DNS traffic on their networks.<ref>https://www.reddit.com/r/Nanoleaf/comments/m35bv5/collectornanoleafme_top_talker_on_network/</ref><ref>https://www.reddit.com/r/Nanoleaf/comments/m8g50y/my_4_aurora_are_creating_a_total_of_137000_dns/</ref> For example, a single '''Nanoleaf bridge''' was found to generate '''100,000 to 300,000 DNS requests per day''', attempting to reach endpoints such as:

*'''collector.nanoleaf.com'''

*'''apollo.nanoleaf.com'''

*'''iaso.nanoleaf.com'''

This traffic persists even when users configure their light panels to operate in '''LAN mode'''. Additionally, completely disconnecting the light panels from the internet does not hinder their functionality, as control is managed locally via the '''HomeKit protocol''', which does not rely on Nanoleaf's servers. This local control remains unaffected regardless of whether cloud integrations are set up or used. Notably, these DNS requests occur even when '''automatic firmware updates''' are disabled.

In response to a customer inquiry, Nanoleaf stated that the frequent communication (occurring every few seconds) is for '''<nowiki/>'communicating with our [Nanoleaf's] cloud for various functionalities, including firmware upgrades and integration with third-party services such as Google Assistant and Alexa.''''<ref>https://forum.nanoleaf.me/forum/community-support/homecalls</ref>

Following public scrutiny, Nanoleaf released a firmware update ('''version 5.2.1''')<ref>https://helpdesk.nanoleaf.me/en-US/light-panels-firmware-release-notes-15633</ref> for the original '''Nanoleaf Aurora panels''', which were discontinued two years prior. This update appears to disable the data collection behavior. However, it remains unconfirmed whether newer, currently sold models have also had this telemetry removed.

===See also===

*[https://nanoleaf.me/en-EU/about-us/privacy-policy/#introduction Nanoleaf Privacy Policy]

==References==

[[Category:Nanoleaf]]

@@ Line 1: / Line 1: @@
 {{StubNotice}}
-Nanoleaf is using GPL software in their smart home products based on OpenWrt and do not contribute back the GPL source code, or allow users to run their own software on their hardware.
-Nanoleaf products are highly popular with many YouTubers using them in their backdrop.
-https://forum.nanoleaf.me/forum/community-support/usage-of-openwrt-and-its-copyright-license
+{{InfoboxCompany
-https://www.reddit.com/r/Nanoleaf/comments/mbhudb/nanoleaf_aurora_run_linux_openwrt_and_nanoleaf_is/
+| Name = Nanoleaf
-https://forum.openwrt.org/t/nanoleaf-light-panels/81748
+| Type = Private
+| Founded = 2012
+| Industry = Consumer Electronics
+| Official Website = https://nanoleaf.me/
+| Logo = Nanoleaf logo.png
+}}
+[[wikipedia:Nanoleaf|'''Nanoleaf''']] is a company that specializes in LED lighting, it was founded in 2012 and launched its first products with Kickstarter funding.<ref>https://www.crowdfundinsider.com/2014/09/48447-nanoleaf-bloom-dimming-bulbs-over-160000-during-final-days-on-kickstarter/</ref> Nanoleaf products are highly popular with many YouTubers using them in their backdrop.
+==Anti-consumer practices==
+===GPL violation===
+Nanoleaf is using '''GPL-licensed software''' in its smart home products, which are based on '''[https://openwrt.org/ OpenWrt]'''. However, the company is not complying with the terms of the '''GNU General Public License (GPL)'''<ref>https://www.gnu.org/licenses/gpl-3.0.html</ref> by failing to contribute back the modified source code or allowing users to run their own software on the hardware.<ref>https://forum.nanoleaf.me/forum/community-support/usage-of-openwrt-and-its-copyright-license</ref><ref>https://www.reddit.com/r/Nanoleaf/comments/mbhudb/nanoleaf_aurora_run_linux_openwrt_and_nanoleaf_is/</ref><ref>https://forum.openwrt.org/t/nanoleaf-light-panels/81748</ref>
+===Aggressive data collection===
+Nanoleaf devices collect information about the network environment they are connected to and transmit this data to the manufacturer. This data collection is not disclosed during the device setup process. Since the device maintains a constant network connection via Wi-Fi, it operates continuously and sends metrics aggressively. This behavior was highlighted by members of the '''Pi-Hole community''', who observed that Nanoleaf devices were among the top consumers of DNS traffic on their networks.<ref>https://www.reddit.com/r/Nanoleaf/comments/m35bv5/collectornanoleafme_top_talker_on_network/</ref><ref>https://www.reddit.com/r/Nanoleaf/comments/m8g50y/my_4_aurora_are_creating_a_total_of_137000_dns/</ref> For example, a single '''Nanoleaf bridge''' was found to generate '''100,000 to 300,000 DNS requests per day''', attempting to reach endpoints such as:
+*'''collector.nanoleaf.com'''
+*'''apollo.nanoleaf.com'''
+*'''iaso.nanoleaf.com'''
+This traffic persists even when users configure their light panels to operate in '''LAN mode'''. Additionally, completely disconnecting the light panels from the internet does not hinder their functionality, as control is managed locally via the '''HomeKit protocol''', which does not rely on Nanoleaf's servers. This local control remains unaffected regardless of whether cloud integrations are set up or used. Notably, these DNS requests occur even when '''automatic firmware updates''' are disabled.
+In response to a customer inquiry, Nanoleaf stated that the frequent communication (occurring every few seconds) is for '''<nowiki/>'communicating with our [Nanoleaf's] cloud for various functionalities, including firmware upgrades and integration with third-party services such as Google Assistant and Alexa.''''<ref>https://forum.nanoleaf.me/forum/community-support/homecalls</ref>
+Following public scrutiny, Nanoleaf released a firmware update ('''version 5.2.1''')<ref>https://helpdesk.nanoleaf.me/en-US/light-panels-firmware-release-notes-15633</ref> for the original '''Nanoleaf Aurora panels''', which were discontinued two years prior. This update appears to disable the data collection behavior. However, it remains unconfirmed whether newer, currently sold models have also had this telemetry removed.
+===See also===
+*[https://nanoleaf.me/en-EU/about-us/privacy-policy/#introduction Nanoleaf Privacy Policy]
+==References==
+<references />
+[[Category:Nanoleaf]]