Re:Say Cheese: a snapshot of the massive DDoS attacks coming...
by abalone on Tuesday October 11, 2016 @06:59PM
(#12689212)
You are seriously under-representing the impact of firewalls on the security of the Internet. Every consumer router has a built-in firewall. They don't need to know anything about it because the default configuration works for most consumers. That's what we should be aiming for as a solution for the IoT security problem. Something that just works for most cases without configuration... much less extensive labeling with commensurate demands of technical knowledge and attention on the part of every consumer.
They are not perfect (nothing is), but a Internet without firewalls would be apocalyptically worse.
Re:Say Cheese: a snapshot of the massive DDoS attacks coming...
by riskable on Tuesday October 11, 2016 @07:41PM
(#12689399)
Most consumer routers have a built in firewall, yes but I've never seen one outside of my own house that's actually configured to block anything. Have you? No one configures them!
No, NAT is most decidedly not a firewall.
Sigh. Firewalls worked great for Yahoo, Sony, and LinkedIn, right?
Firewalls are just a layer. They don't even do that much!
Not only that but the average consumer knows nothing of firewalls. Do we expect Joe Average to be able to login to his router and configure a firewall to allow his refrigerator access to its security update server? Or maybe we should expect Jane Average to configure her Firewall to perform MitM attacks on SSL so traffic going to/from her IoT coffee maker can be inspected?