4 ms·
> And if they don't act, regulate them out of existence. Sounds easy but doesn't work IRL. The service providers don't build the units and rely on the supplier
by lbriner 8y ago
> And if they don't act, regulate them out of existence.
Sounds easy but doesn't work IRL. The service providers don't build the units and rely on the supplier. The supplier might have patched it but wants money, the ISP doesn't want to pay. Maybe the patch breaks something else and the ISP don't want to put that on all their users.
Also, not all vulnerabilities are equal. Some are more serious than others and require patching urgently, others less so.
And not all ISPs can push a patch so how do you tell everyone to update and what happens when it doesn't work and 1M people are calling Customer Support?
- toomuchtodo 8y agoComcast has functionality where they will email and/or text you if your connection has botnet or other nefarious activity on it and will disconnect you until it's resolved. Not a fan of them, but it's something they get right. https://i.imgur.com/cYKXtII.png https://i.imgur.com/cYKXtII.png
- paulie_a 8y agoIf an ISP can't push reliable updates to their hardware they shouldn't be in business. Vulnerabilities should be prioritized of course. But I honestly don't mind when someone creates a worm that bricks crappy devices that isps know are vulnerable. It's a public service at that point.