4 ms·
Good article imho. Read-only with "ramdisk" (volatile memory filesystems) is a much overlooked defence. I am amazed at the number of IoT devices I've picked up
by nonrandomstring 2y ago
Good article imho. Read-only with "ramdisk" (volatile memory
filesystems) is a much overlooked defence. I am amazed at the number
of IoT devices I've picked up in second hand stores that are loaded
with state, secrets and PII. I got a GPS device with a large company's
entire delivery address book, and a VoIP phone containing another
company's entire internal voice network with names, office numbers,
and personnel notes.
Put this stuff into a capacitor backed volatile disk with the main OS
running from non-volatile. Set the current drain so that it stays for
at most 7-14 days after power is removed.
- eschneider 2y agoI expect most IoT devices run from read-only boot devices. From a device management/performance/eMMC wear perspective, it's really the only way to go. That said, many devices will store state in a separate filesystem, which is a completely different issue. :/