4 ms·
We really just need education and prevention on the hardware side. Just like sex... if you don't absolutely know where something has come from or has been befo
by Cshelton 10y ago
We really just need education and prevention on the hardware side.
Just like sex... if you don't absolutely know where something has come from or has been before, DON'T STICK IT INSIDE OF YOU (...without protection).
Consumers:
If it's an sd card, a usb-stick/flash drive...whatever, don't put it inside of your hardware. Especially critical hardware such as a thermostat.
Hardware creators:
Don't build slots, or at least exposed slots, for sd cards/usb drives, etc. on hardware such as thermostats, cameras, etc. I know the sales team told you the customer wants to put an image of their cat as the background of their thermostat, "it's the killer feature". Just say NO. There is absolutely no reason to do that using hardware. Build an online portal where users can upload images and then check them yourself before offering them as background choices.
- pavel_lishin 10y ago> There is absolutely no reason to do that using hardware. Build an online portal where users can upload images and then check them yourself before offering them as background choices. Doesn't that just move the threat surface? Now instead of having to convince end users to put something on a USB stick, you have to try a password dump against your interface.
- Practicality 10y agoRight. In practical terms the online portal tacked on at the last minute is likely much less secure than the hardware tacked on. Although both ideas are nightmares for security.