3 ms·
> He just authenticated with his own device’s token and discovered that the system had absolutely no concept of which devices that token was supposed to be allo
by _wire_ 7mo ago
> He just authenticated with his own device’s token and discovered that the system had absolutely no concept of which devices that token was supposed to be allowed to access.
Privacy thru ubiquity?
(this is a dumb joke)
But do you want domestic appliances representing "proof of who you are" interacting on a universal public network?
Would it be a bigger fail if this product were better designed in such regard?
e.g., the Ring debacle
The designers of the internet left a lot on the table regarding security architecture and we will be paying the price for this design neglect for generations.
- mooreds 7mo agoI agree that I don't want my vacuum cleaner to have my government id :) . But there's a spectrum. I think expecting my vacuum cleaner to limit my access via any API (documented or not) to my own devices. Seems like a small ask.