9 ms·
What I do with untrusted wifi devices like my AV receiver and girlfriend's printer is put them on a separate network that has all Internet access disabled by de
by boring_twenties 7y ago
What I do with untrusted wifi devices like my AV receiver and girlfriend's printer is put them on a separate network that has all Internet access disabled by default.
So if I lose my configs, these devices will simply stop working. There is no way for them to accidentally connect to my real network (since they've never known the passphrase to those).
Wifi is actually kind of better than Ethernet for this use case, since even if you set up certain switch ports to be part of a different virtual interface, if you reset to the default config they'll have full Internet access again.
- neilv 7y agoI like the idea of partitioning by networks, as well as a safe failure mode. BTW, reportedly, there's already at least one brand-name TV in the wild that will automatically connect to any open WiFi it can find, for the purpose of phoning home. When I upgrade to 4K, I might have to get a commercial monitor instead, or do some Dremeling.
- boring_twenties 7y agoDo you happen to know which brand or even model of TV that is?
- mirimir 7y agoFYI: https://www.techspot.com/news/81954-new-studies-find-smart-tvs-sending-sensitive-data.html https://www.techspot.com/news/81954-new-studies-find-smart-t...
- kalleboo 7y ago> even if you set up certain switch ports to be part of a different virtual interface, if you reset to the default config they'll have full Internet access again This is why you usually just blackhole the default VLAN 1, and configure all your trusted devices to be on an non-default VLAN. Then if your switch loses it's config, it defaults to nothing working rather than a free-for-all.