3 ms·

Totally with you. Maybe I'm a pessimist or a luddite or something, but I really don't think IoT devices should be connected directly to the Internet. Most are j

Totally with you. Maybe I'm a pessimist or a luddite or something, but I really don't think IoT devices should be connected directly to the Internet. Most are just too simple, underpowered or cheaply made to adequately defend themselves from attacks. IoT gadgets should always talk to a more powerful/secure hub of some sort, which then is exposed to the Internet. Seriously, my WiFi lightbulb switch just has no business doing anything outside my internal network... And god help us when all these IoT devices start talking IPv6... With no NAT and anemic firewalls on most routers? Oof.

HoppyHaus 9y ago
Absolutely. I love small devices I can modify and the such, but when I do it, it's some assurance that i have a bit of security-by-obscurity, as well as an open-source background that usually comes with the random-modification scene. But when a commercial entity wants my lights to connect to the internet, chances are they are less-modifiable than a few hacked-together circuits.
hvidgaard 9y ago
I've had this conversation before. I want "IoT" stuff to connect to a bridge I control. Even that does not need to go outside of the network, I can VPN into my network if I need access. But John Doe does not care, he wants convenience to the point where the IoT manufacturer knows everything about how they use the product.
dingaling 9y ago
Just because a device supports IPv6 doesn't mean you have to route that prefix to the Internet. Assign Unique Locals ( ULA ) to untrusted LAN devices and no Internet router will carry them. Then your laptop or phone can additionally receive a routed prefix. Remember with IPv6 you can assign an arbitrary number of prefixes and addresses to each interface, or just one. It makes for very flexible routing.
smacktoward 9y ago
But then how am I supposed to turn the garage doors of all the other houses on my cul-de-sac into the world's largest game of Hungry Hungry Hippos?

HoppyHaus 9y ago

Absolutely. I love small devices I can modify and the such, but when I do it, it's some assurance that i have a bit of security-by-obscurity, as well as an open-source background that usually comes with the random-modification scene. But when a commercial entity wants my lights to connect to the internet, chances are they are less-modifiable than a few hacked-together circuits.

hvidgaard 9y ago

I've had this conversation before. I want "IoT" stuff to connect to a bridge I control. Even that does not need to go outside of the network, I can VPN into my network if I need access. But John Doe does not care, he wants convenience to the point where the IoT manufacturer knows everything about how they use the product.

dingaling 9y ago

Just because a device supports IPv6 doesn't mean you have to route that prefix to the Internet. Assign Unique Locals ( ULA ) to untrusted LAN devices and no Internet router will carry them. Then your laptop or phone can additionally receive a routed prefix. Remember with IPv6 you can assign an arbitrary number of prefixes and addresses to each interface, or just one. It makes for very flexible routing.

smacktoward 9y ago

But then how am I supposed to turn the garage doors of all the other houses on my cul-de-sac into the world's largest game of Hungry Hungry Hippos?