3 ms·

> Back in 2015, I was working on a project to build PoE-powered embedded x86 computers and digital signage systems. > Our device required about 23W when fully

by xyst 1y ago

> Back in 2015, I was working on a project to build PoE-powered embedded x86 computers and digital signage systems. > Our device required about 23W when fully operational, which pushed us into 802.3at (PoE+) territory The problem the author solved is quite interesting. But I can’t help but think how wasteful it is to load up a full copy of windows just to serve up dumb advertisements. The attack surface of a fully copy of windows 10 is an attackers wet dream. Hope most of these installations are put out to pasture and replaced with very low power solutions.

wildzzz 1y ago
It all depends on the environment. If windows is already running on every PC in the building, it may make more sense to have these signs run windows too. You can put copies of the security software you're already paying for and allow for approved AD users to login and manage the signs. Windows is a great attack vector but there's less risk if you're in control of it versus some vendor solution that you can't audit as easily. The fact that you don't have a user going to malicious websites or plugging in malware flash drives probably reduces the risk too. If you already have 1000 windows machines on the enterprise network, what's a few more?
- stackskipton 1y ago
  Having worked with these systems before, most of them are appliances meaning no, we did not AD join them or install our security software. Windows was running because Linux was too hard for vendors.
  - shadowpho 1y ago
    Linux is also a PIA for non-server application. I’ve spent several days getting my screen to stay on for a Linux driven display.
smileybarry 1y ago
They’re usually IoT editions of Windows 10, I.e. still the same kernel but with a lot less bundled apps etc. and a LTS support cycle. I’m also not sure how much of modern Windows is that big of an attack surface, given that most things are just firewalled off automatically.

by xyst 1y ago

wildzzz 1y ago

It all depends on the environment. If windows is already running on every PC in the building, it may make more sense to have these signs run windows too. You can put copies of the security software you're already paying for and allow for approved AD users to login and manage the signs. Windows is a great attack vector but there's less risk if you're in control of it versus some vendor solution that you can't audit as easily. The fact that you don't have a user going to malicious websites or plugging in malware flash drives probably reduces the risk too. If you already have 1000 windows machines on the enterprise network, what's a few more?

stackskipton 1y ago
Having worked with these systems before, most of them are appliances meaning no, we did not AD join them or install our security software. Windows was running because Linux was too hard for vendors.
- shadowpho 1y ago
  Linux is also a PIA for non-server application. I’ve spent several days getting my screen to stay on for a Linux driven display.

smileybarry 1y ago

They’re usually IoT editions of Windows 10, I.e. still the same kernel but with a lot less bundled apps etc. and a LTS support cycle. I’m also not sure how much of modern Windows is that big of an attack surface, given that most things are just firewalled off automatically.