3 ms·
Ask HN: Do I protect my IoT project by not doing over-the-air updates?
I'm working on a simple piece of hardware that just sends a single data point. I don't foresee many needs to change the firmware.
It seems like many of the IoT security problems step from "hijacking" from over-the-air updates, and that I can avoid this by not allowing them. Is that true?
- Ezhik 10y agoOn one hand, you get rid of a big attack vector. On the other, if a vulnerability in your code exists, it's there for good.
- seizethecheese 10y agoThank you. If there's no infrastructure for updating the code, what vulnerabilities that could exist should I be aware of?