3 ms·
Shitty IOT devices are too small to use openssl anyway. The big ones are updated with their stack. We started upgrading our stack about half a year ago, and 3.x
by rurban 3y ago
Shitty IOT devices are too small to use openssl anyway. The big ones are updated with their stack.
We started upgrading our stack about half a year ago, and 3.x should be ready now for the next release.
The biggest change were outdated RC4, which was a good thing to get rid of this cruft
- jeroenhd 3y agoPlenty of IoT devices out there that run on full-blown Raspberry Pi's or equivalent boards. Paying someone to write embedded firmware is expensive, throwing together a UI in Python is cheap. Not that this poses such an issue for those devices; I doubt they ever received firmware updates in the first place. Still, you'll find OpenSSL in the weirdest places.
- crest 3y agoThe worst IOT devices are based on old EoL Android versions hacked on without any understanding by each party adding a little and resell it as the next higher margin product like nesting matryoshka dolls while planning to dissolve the respective business before anyone sues them for the abomination they cobbled together.
- supertrope 3y agoI once saw a photo of crashed credit card machine. A diagnostic screen showed openssl as one of the libraries in use.