Two ACHR News items point at the same question from opposite ends. The first is a product story: DiversiTech and Respiro announced a carbon monoxide shutoff switch, which the summary describes as "designed for fuel-burning furnaces and water heaters." The second is a security story: hackers disrupted refrigeration control systems in France, and the summary reports temperatures reaching as high as 122°F, which spoiled food and caused fires. The equipment is different, but the homeowner question is the same: which protection runs on a path you can trace with a meter, and which one depends on a controller that can be reached, changed, or knocked offline over a network?
Trace the Shutoff Path Before You Trust It
A carbon monoxide shutoff only helps if it is wired where it can act. Start at the furnace or water heater with the power off and open the cover that holds the device's connections. Follow the conductors. Note whether the device interrupts a gas valve circuit directly, drives a relay, or sends a signal to the control board. Each route fails differently. A direct interrupt depends on the wiring staying intact. A board signal depends on the board having power and the right programming. Photograph the wiring before you touch anything, sketch the path on paper, and keep the sketch with the appliance records.
Use the meter for what it can answer. With the power off, check continuity across the device's output contacts in the state the manual specifies, and compare the reading with the wiring diagram. With the power on, confirm the device has supply voltage at its input terminal. If the diagram is missing or the readings do not match, stop and have a licensed technician check the circuit. Write the date, the model number, and both readings on the log.
Keep the Controller Separate From the Protection
A thermostat or hub is a convenience layer. It can change setpoints, run schedules, and push alerts, and those features are useful. It should not be the only thing standing between a fuel-burning appliance and a problem. The furnace's own high-limit controls and flame safeguards belong to the equipment, and a stand-alone carbon monoxide device belongs to the room. Neither should need an app to be reachable. The France item is a reminder that a control system can be disrupted while the equipment underneath is sound, and that the temperature in the cold case or the house is usually the first symptom a person notices, not the cause.
Ask three questions about every connected device in the house. Who holds the login? Has the password been changed from the factory value, and is it stored somewhere you control? Does a local keypad or manual setpoint still work when the internet is down? If any answer is unclear, the device is not yet a dependable part of your system.
A Field Check You Can Run This Month
Walk the house with a short list. Locate every carbon monoxide device on fuel-burning equipment and label which one is the shutoff and which one is an alarm. Press each device's own test control and log the date. Confirm the thermostat's manual mode works with the app disconnected. After any firmware or app update, check that the appliance's high limit and flame safeguard behave normally, and record any change in cycle behavior. Finally, update the controller password, turn off remote access you do not use, and note which network the controller sits on. Keep the list short enough that you will repeat it every fall.
What the Headlines Cannot Tell You
The France item asks whether a similar disruption could reach U.S. systems. A headline cannot answer that for any particular house. Exposure depends on what is connected, how it is secured, and whether anything fails safe when the link drops. Read the manufacturer's documentation, ask the installer which functions still run offline, and treat that answer as the specification for your own home. You do not need to understand the attack to check your own wiring, your own logins, and your own local controls.