4 ms·
This all seems reasonable. Frankly, though, imagine the benefit we would see if this was also enforced for consumer network equipment, like routers...
by jchw 7y ago
This all seems reasonable. Frankly, though, imagine the benefit we would see if this was also enforced for consumer network equipment, like routers...
- bigiain 7y agoMostly reasonable, but shortsighted it seems to me. How do they expect to enforce these requirements on the manufacture of the IoT crap sold by the vendor “Best Security Happiness Store” on AliBaba, and the unnamed (or outright counterfeit named) Chinese manufacturer they bought it from? And conversely, they could obviously easily apply this to the UK based Raspberry Pi foundation, but who’s responsible for enforcing the “no way to reset to a known factory password” for the pi:raspberry login from a stock Rasbian install? (Or do we just hand wave that away and say “that’s not a consumer device, even though we’ve shipped over 30 million of them!”?)
- hakfoo 7y agoI suspect the Raspberry Pi issue is avoided because technically, it doesn't do squat until you install software on it. You might get a preflashed Raspbian card in the box, but I could just as easily be running RiscOS