3 ms·
> It's just a matter of implementing a signature verification of the firmware updates that are installed on the device. In principle: yes. In practice: signing
by arp242 3y ago
> It's just a matter of implementing a signature verification of the firmware updates that are installed on the device.
In principle: yes. In practice: signing keys seem to get leaked all the time.
It's not a mechanism I would blindly trust in security sensitive domains.
- lnxg33k1 3y agoWe could start by asking iot companies to be ISO 27002, stop saving passwords in excel files or in s3 bucket publicly accessible could help Security is not an update, security is a cultural trait of an entity or an individual