I am totally onboard for not having automatic updates enabled on ANYTHING I own, just in case there is an issues with the update. So when Sonos released the new app, I chose to update a single device.. just in case. But I am one of the lucky users who only have minor inconveniences and use the app for everything.
That being said, the recent updates have solved many issues users were having initially and I recommend you apply the app update as well as the speaker firmware update. You can then disconnect your speakers from the internet, so that you feel safe again.
You may need to hard wire the Playbar to your router/network temporarily, in order to complete the update.
Thx Pools for you input. My Playbar “fixed itself” once I reconnected it temporarily to the internet (Wifi only). Not further actions needed on my part. I did not run any updates, nor did the Sonos app challenge me to run any updates.
Oh, and the error message in my original post should read 1.066
It is of course your choice not to connect your speakers to internet. This would also allow you not to update because any security updates would not be necessary. However to me it is not obvious for what security reasons you would not connect the speakers to the internet. I’ve never read about anyone’s set up being compromised by having a Sonos device connected.
Well, from a security perspective, I have simply NO TRUST what so ever into the capabilities of SONOS when it comes to software development and management.
Having multiple boxes in house, some of them even carrying a microphone, some of them in my bedroom and all of them constantly connected via the internet to a cloud service created by people like SONOS. I consider that a severe security risk, I am NOT willing to take.
Prominent example (beside the various update & app messes that SONOS created over the years) would be the web app. http://sonos.com/web-app - that thing exposes functionality of the speakers (in my bedroom) - only protected by username and password! Hey - Multi-Factor Authentication is a must have. And you can not even disable it in your settings! NO-GO. So the only choice I have (beside selling my SONOS setup) is to turn off the internet connectivity.
So what could anyone do with the Sonos web app (if your password wasn’t strong, which it is of course) that would be of value to anyone.
And why buy Sonos when you have “NO TRUST” in anything they do?
So this boils down to your personal opinion, which you are allowed to have. Not “obvious security reasons”.
So what could anyone do with the Sonos web app (if your password wasn’t strong, which it is of course) that would be of value to anyone.
Incorrect: It is established security knowledge, that even strong passwords are not enough any more. And yes, I do use strong passwords. But considering that the box in my bedroom has a connection to a server in the internet that in turn is only protected with U:PW should scare everyone.
And why buy Sonos when you have “NO TRUST” in anything they do?
At the time I bought, I was unaware of the web interface and that SONOS would turn their home speaker system into a cloud service. That is an evolution of the past 1-2 years and my speakers are older.
So this boils down to your personal opinion, which you are allowed to have. Not “obvious security reasons”.
Incorrect: Very obvious security reasons as described. I have yet to see an independent security review of the SONOS speakers, their cloud service, dev/ops etc. Without that, only the facts (no MFA on a server interface, undocumented outbound connections, undocumented service and product behavior) count into my perception. It is your opinion that those reason are unfounded ;-)
