How do we disable remote access with the new Sonos web app?

Without two-factor authentication it’s only a matter of time before users’ accounts get compromised and remote control of their speakers is possible by a third party!

Imagine the bad publicity that will bring Sonos on top of this car crash of a new app!

I don’t currently want or have the need to control my music from outside my home. It seems like a pretty big oversight to not have the ability to turn this off as well as to have MFA on user accounts. Hopefully Sonos adds them both to their what must be a massive to do list. 

 

Hi @dave77 

Thanks for your post!

Thank you - I've marked this thread as a feature request and it will be seen by the relevant teams for consideration. Keep the ideas coming!

Downgrade to S1 - the web app doesn’t work against S1 systems.

This is not a feature in the new app. 

I am shocked by the mindlessness of this so-called “update”.

This is a complete security and privacy nightmare.

The only upside is that I can see how TERRIBLY this all is implemented, errors all over the place, including HTTP 404 (not found), 500 (server error), 422 (unprocessable entity), 429 (too many requests) and highlight error messages like "Exception parsing upnp parameters" and "Unknown service. Service id: local-library. Account id: undefined". At least I know why my favorites aren’t loading.

Switch this off immediately. I’m wiling to take legal action and this is just the b/s I sensed when Sonos forced “accounts” down our throats. I don't want and need a Sonos account for the product to work, there's only benefit for one side. A shame!

The cloud API and ability to control our SONOS systems have actually been available for years but without much benefit to normal users - nothing much have changed other than people being aware of this.

And yes - the access really should be protected by 2-factor authentication!

I would prefer to be able to turn this “feature off” 

Does anybody know how to setup  firewalls in the router to block this access

The sonos telemetry can be blocked through your dns service if you use something that supports blacklisting. This is what I’ll be looking at when I get time.  But I’m not sure if this will be possible cause it seems like everything goes through the web now. I’m kinda hoping someone smarter than me will figure it out  🤣

Me to i was looking into the traffic to and from my arc but  i font realtid the Knowhow to realisera whist to block