5 ms·
We need an internet of firewalls. I dislike tech legislation, but sometimes I think all networked devices should be required to have an internal firewall.
by stephengillie 8y ago
We need an internet of firewalls. I dislike tech legislation, but sometimes I think all networked devices should be required to have an internal firewall.
- georgyo 8y agoMany of these devices have to listen for something. Mdns, http, printer, etc. Having a firewall does nothing when you have to open up the ports that are being exploited anyway.
- lrem 8y agoWell, they don't need to listen to everyone that knocks. I'm sure we would be delighted when devices would only talk to clients with valid certificates from the vendor, right? Edit: disclaimer: I work for Google, but my only contact with the home ecosystem is having a Chromecast.
- TeMPOraL 8y agoWould we? The next thing that would happen is those certificates would end up inside secure chips, and suddenly the only way to talk to an IoT device would be through an official vendor's app, over an official vendor's bridge. No thank you. Turning physical products into services is not what I want.
- hrktb 8y agonaive question: would it be realistic to filter who gets to talk to who, on wich protocols at the router level ? I guess basic rules could be setup, but would there be a higher level way for that kind of orchestration
- mavhc 8y agoA much better LAN firewall will be needed, can also mean you can easily get rid of 1 to many NAT with IPv6. It would have to be self learning for any hope of adoption by the mass market
- snarfy 8y agoThis reminds me of a product idea I had a while back - a sandboxed wifi router that plugs in to your existing router. When you setup your IoT devices, you point them to the sandbox. I figure this already exists, and nobody cares.
- davefp 8y agoI'm somewhat surprised that home router manufacturers haven't started shipping models with a built-in IoT guest network that has its own VLAN. Incidentally it's concerns such as those raised in the article that drove my decision to use zigbee or z-wave devices for my HA setup where possible.
- notyourwork 8y agoSome do, I just setup a ubiquiti amplifi which has guest WiFi feature.