2 ms·
You realize that a lot of these devices have been found to phone home to servers in the motherland, right? Without informing the user they were doing so? Or w
by voakbasda 3mo ago
You realize that a lot of these devices have been found to phone home to servers in the motherland, right? Without informing the user they were doing so? Or would be expected for the class and function of device? You wanna explain how that was just “buggy and insecure”?
- giov4 3mo agoA device calling home and posting data is normality since many years already and does not directly represent a security risk for the normal user, based also on the fact that this communication is often covered by his vendor policy acceptance. what's bad is if the vendor is sending data that should not be sent or collected and if the vendor leaves the device insecure, especially on purpose. In relation to the inverter case yes that can represent potential risk since it would be part of the grid too, hence near to crit infra and maybe even able to influence it. Additionally network can be controlled, limited and inspected, that's a bit different for a hidden backdoor or hardcoded creds in a flashed firmware on a chip.
- lazide 2mo agopretty much anything could be hidden in a firmware update over SSL, yeah?