[InitialBP]

Defaulting a furnace to on certainly shouldn't be considered safe. What if it's leaking CO into your house, what if it gets dangerously hot and causes a fire?

A thermostat and controls are a necessary requirement for HVAC systems and defaulting anything to "run" if your control plane doesn't exist anymore is definitely not the safe option.

The other issue is that in almost all situations (like this one) what you think is a safe and sane default won't align with what other people think.

There should be defaults and they should be clearly defined, but I don't think it's always obvious to determine what they are.

[sokoloff]

> What if it's leaking CO into your house

While I agree with your overall point, this clause is irrelevant to/not supportive of it. The presence of a thermostat wasn't going to help you here either and there are vastly more furnaces with connected thermostats than disconnected to worry about.

CO detectors and alarms are needed to address this risk.

[zdragnar]

Your thermostat is in a far less likely place to be overloaded with CO should the alarms start going off, though. If the thermostat is gone, you have to physically go to the furnace itself or shut off power at the circuit breaker.

Freezing water pipes are bad, but a furnace running non-stop is going to exceed its duty cycle and pose a greater hazard.

[ndsipa_pomu]

If something is leaking CO into your house, then it's a major safety issue and needs to be immediately scrapped. Whether or not it's internet connected is the least of your worries.

[0x457]

> What if it's leaking CO into your house, what if it gets dangerously hot and causes a fire?

Furnaces have multiple checks when they turned on, even on the dumbest furnaces. There are multiple safety mechanisms preventing it from getting too hot. CO leak - what thermostat will do for you here?