3 ms·
> When I was your age I was leaving the security industry before it was cool I'm not interested in leaving the security industry. I'd rather work to change it.
by ontoillogical 10y ago
> When I was your age I was leaving the security industry before it was cool
I'm not interested in leaving the security industry. I'd rather work to change it. I'm a millennial, I guess :)
> The "security industry" is not in fact chartered with stopping things like Mirai. So Mirai is a weird complaint to level at it.
No one "chartered" the industry to do anything.
You're right, a metal box or an AV isn't going to prevent your IoT product from shipping with default creds on telnet, but don't you think the industry is complicit in drowning out the good advice to not do that in a sea of noise and then blaming the victims?
- tptacek 10y agoNo? I am having a hard time seeing any intersection between either of the major two branches of the security industry (PC security and network security) and IoT botnets. There's a major failure happening, but it's not attributable to the security industry. It's a failure of the computing industry as a whole.
- brians 10y agoIf there will always be crap out there, everyone's going to need an immune system. Long term, we can wish for a fancy adaptive one. In the short term, we probably just get an analogue to inflammation---something like the DDoS network scrubbing industry. That doesn't try to stop IoT botnets; it just extracts rent for keeping some people safe from them.