What PHP2Shell Made Me Think About My 433 MHz Remote

These past few days, it feels like every other headline has been another vulnerability, and every other website has been rushing to patch. PHP2Shell was the one that caught my eye, with PHP telling server administrators to apply emergency fixes now.

Then I looked at the 433 MHz remote on my bench.

No website, no PHP, no cloud login, and no patches needed tonight. I press a button, my remote sends an EV1527 code, and a paired RX480E-4 changes one of its D0-D3 outputs. That is the whole path.

I am not saying RF is magically safe. Interference and replay attacks are real, and adding an MCU or cloud gateway means adding another layer to protect. But this contrast is a good reminder to ask: how many controls really need to leave the room?

For a project, I like a path I can see, test, and understand. Maybe the web has enough patching to do without making my workshop light apply for a cloud account.

What do you keep local?