3 ms·
>NIST’s initial rules include today’s best practices, such as having an over-the-air device update program Weren't these kinds of automated updates the basis f
by calibas 6y ago
>NIST’s initial rules include today’s best practices, such as having an over-the-air device update program
Weren't these kinds of automated updates the basis for the SolarWinds attacks?
- Rebelgecko 6y agoI don't think that's an inherent problem with OTA updates, just bad security practices
- Leherenn 6y agoIt's a trade-off. With OTA updates you increase your attack surface, but you make it more likely that the device is updated if needed.