4 ms·
How will it detect unwanted (spying) traffic from legitimate operations (software update...)? Moreover it is a moving target, as the firmware can, at some poin
by natmaka 7y ago
How will it detect unwanted (spying) traffic from legitimate operations (software update...)? Moreover it is a moving target, as the firmware can, at some point in time, use another endpoint (especially after an update).
- squarefoot 7y ago"How will it detect unwanted (spying) traffic from legitimate operations (software update...)?" That would be harder, especially true in case of encrypted traffic. "Moreover it is a moving target, as the firmware can, at some point in time, use another endpoint (especially after an update)." This one might be easier to fight than the former. Upgradabe black lists might be a solution, not unlike some antispam software work: the firewall software downloads weekly/daily from a central server (1) a list of all legit/evil addresses and checks where the TV attempts to connect against that list, then filters traffic as required. (1) I would assume we would trust a centralized server for this purpose as much as we would trust a server holding spam and malware sites.
- natmaka 7y agoEach firmware update may come with a large list of endpoints. They also may use the very same servers (IP addresses) in order to spy and also for the updates or legitimate apps. For the customer eager to benefit from a connection to the Internet it may be a lost battle, he will be spied on.