3 ms·
Which is why I think if we are going to do IoT, it needs to all be behind some gateway designed by a company that will maintain security for decades. Make a NA
by SilverRed 5y ago
Which is why I think if we are going to do IoT, it needs to all be behind some gateway designed by a company that will maintain security for decades.
Make a NAS drive which exposes everything to the gateway without bothering for authentication and then let Apple/Google/Amazon work out how to defend access to the resource.
Random OEMs are unable to pull off IoT safely.
- ale42 5y agoThe IoT device will still be connected to a LAN/WiFi network to access that gateway. Local attacks will still be possible (imagine a flaw in the TCP/IP stack, local firewall, or anything on that direction). And if that big company gets hacked (never say never), hackers would get access to a huge amount of devices ready-to-pwn. Not even thinking then about what this would mean from a privacy/mass surveillance point of view (by those companies or by agencies infiltrating them).
- gambiting 5y agoI can kind of see a device that has no ports open on the local network, and just uses an always-on ssh tunnel to HQ to receive commands. That way it's not exposed to anything on the local network, and it's the company resources that would have to be hacked first.