3 ms·
If you were deploying web servers on embedded devices without planning for easy and painless upgrades, joke's on you. That's terrible for your client's securit
by Tobu 13y ago
If you were deploying web servers on embedded devices without planning for easy and painless upgrades, joke's on you. That's terrible for your client's security.
- Silhouette 13y agoSome of those clients' security involves (among other things) firewalled private networks, biometric access controls overseen by armed guards, and a requirement to provide complete systems free of charge for several months of testing and auditing before any new software roll-out is approved. There is no such thing as easy and painless upgrades in that kind of environment, and that is by design. You don't exactly want the patient records in your healthcare systems or the performance monitoring tools with access to all of the traffic on your telecoms infrastructure or the card processing systems at your bank to be accessible on the public WiFi, after all.
- nknighthb 13y agoThese are the exact opposite of the kinds of places you would expect an untested Firefox update to show up. You are being inconsistent. Is it a tightly-controlled environment or not?
- Silhouette 13y agoThe environment in which these devices exist and the environment in which the machines used to access them exist are not necessarily the same. Obviously they will be connected in some way, but it is perfectly rational to want to apply security updates to staff computers that might encounter software or data from external sources but which might also be used to access in-house systems that are tightly controlled.