2 ms·
> A basic checklist of best practice for internal self-audit (SQL injection, plaintext data, enumeration attacks) I think this is a massive ask/knowledge expec
by elliekelly 7y ago
> A basic checklist of best practice for internal self-audit (SQL injection, plaintext data, enumeration attacks)
I think this is a massive ask/knowledge expectation for the average person. A simple warning label about changing the device password from the default would be a major step in the right direction for consumers.
- nitrogen 7y agoThe average consumer probably has no idea what a growth hormone is either, but it's all over food labeling. It might be enough if there is a label that security experts know and understand, that consumers can learn to say yes/no about without having to know what it really means.
- michaelt 7y agoI think sonofgod means "Vendor self-certifies they have tested their device against the checklist" rather than that end users would perform the audit.
- fmajid 7y agoThe label could have a simple grade, along with a QR code leading to the governmental agency approval DB page for the product in question.