3 ms·
This article is strange. Low power devices that need to conserve batteries are not ddos origins. Cctv cameras are. They are not that underpowered (they need to
by rapsey 8y ago
This article is strange. Low power devices that need to conserve batteries are not ddos origins.
Cctv cameras are. They are not that underpowered (they need to be streaming servers), can run tls just fine and 1.3 optimizations don’t make that much of a difference.
Cameras generaly run linaro and they absolutely can update themselves over the network. The problem is that their manufacturers (at least the chinese giants) care very little about this problem. To them running ssl and having an auto update mechanism is a risk and a cost with no return.
What we actually have is an influx of electronics engineers and programmers stepping into a networked world without knowing or caring about security. I’ve worked with them enough to see this attitude is pervasive. IT sevurity is far from their area of expertise.
- lallysingh 8y agoCan we start blocking regular http yet?
- Ajedi32 8y agoNot quite. That'd still result in blocking ~20% of requests on Windows (~30% on Linux). https://transparencyreport.google.com/https/overview https://transparencyreport.google.com/https/overview Slowly making progress though. Apparently in the US 95% of users' browsing time is spent on HTTPS sites.
- mlindner 8y agoArchLinux's package servers are http by default and include no https servers by default. We're a long way from disabling http. It's "not a problem" because packages are signed, but it's still http.
- emilfihlman 8y agoBlocking http means forcing others to subscribe to the PKI model (unless of course self signed certificates become much easier to add and use and not scary, in which case HTTPS is fine), which is neither foolproof nor end-all-solution.