4 ms·
Implement security properly and stop worrying about it. If your devices have open services with vulnerabilities. AND You completely forgot or didn't bother to
by zlynx 8y ago
Implement security properly and stop worrying about it.
If your devices have open services with vulnerabilities.
AND
You completely forgot or didn't bother to use a firewall.
AND
Your devices are using permanent instead of temporary IPv6 addresses.
THEN you might have a problem.
But it's more likely that your badly protected IoT devices are downloading their software updates from a HTTP site without SSL or checksum verification while using a DNS vulnerable to cache poisoning.
- AstralStorm 8y agoTemporary v6 addresses are not a security measure, they're a privacy measure. (And a weak one at that.) An attacker can get route advertisements from your subnet if something is misconfigured on ISP side so they get out and do a tiny bit of inference to figure out which device it is.