4 ms·
Well, good points I suppose. On the other hand if you have a USB port on the thing, what's to keep someone from flashing an update that backdoors the lock? Wa
by technofiend 9y ago
Well, good points I suppose. On the other hand if you have a USB port on the thing, what's to keep someone from flashing an update that backdoors the lock? Wait a few weeks, rob the place, rinse, repeat.
Now that I think about it, I hope these devices are validating the certificate of publisher and the updates are signed.
- jacquesm 9y ago> I hope these devices are validating the certificate of publisher and the updates are signed. You're joking right? Really, the vast majority of this iot stuff is ridiculously bad in this respect. Plain text data transfer, unsigned updates from any source based on a text message and so on. It's a disaster waiting to happen.
- stupidstupid1 9y agoA disaster that has already and continues to happen, you mean.
- jacquesm 9y agoNo, I'm thinking along the lines of large vehicle manufacturer doing an over the air update of the firmware of their vehicles bricking all of them, including the ones on the road. That kind of disaster.
- raverbashing 9y ago> what's to keep someone from flashing an update that backdoors the lock? > from which a signed payload can be loaded All updates should be digitally signed by the lock manufacturer
- jlgaddis 9y agoFrom a security perspective, absolutely they should. But then we complain because we don't "own" the hardware and can't hack around on it.