3 ms·
This is likely outside of the scope of this proposal, but my red team brain sees IoT devices from China as a distributed Trojan Horse. In a time of conflict wi
by consumer451 3y ago
This is likely outside of the scope of this proposal, but my red team brain sees IoT devices from China as a distributed Trojan Horse.
In a time of conflict with China, firmware updates will be sent which will create the largest DDOS botnet in history.
Our cheap IoT lightbulbs will take down major internet infrastructure.
I don’t know the solution to that problem, but it’s a problem. Isn’t it?
- 0xDEF 3y agoNot just on the firmware level. Many cheap IoT products are based on the Chinese ESP32 SoC.
- MarcoPerazaFCC 3y agoThis is something that has us worried too. The FCC took some action on this issue last year by outright banning equipment from certain companies (e.g. Huawei), but we haven't even scratched the surface of this pervasive problem. I really encourage you to share your concerns through an official comment. Maybe the label can include commitments about the provenance (and, e.g., control of signing keys) of the on-device software and associated cloud services?
- 0xDEF 3y agoLook into the ESP32 chip. It's by a Chinese company and is used in almost all cheap IoT products.