News for hackers. Stuff that matters.

A comment on Say Cheese: a snapshot of the massive DDoS attacks coming from IoT cameras. Parent comment

Re:Say Cheese: a snapshot of the massive DDoS attacks coming... by icebraining on Tuesday October 11, 2016 @06:19PM (#12688995)
Maybe someone should start enforcing mandatory VPNs for households? I.e. I get you want to control your LED bulbs from your phone, but that doesn't imply they should be accessible from public Internet.

You don't even need a VPN, just have the device only accept connections from local IPs (and use TCP to avoid spoofed IPs).

[ Parent | on HN ]
Re:Say Cheese: a snapshot of the massive DDoS attacks coming... by pdkl95 on Tuesday October 11, 2016 @08:02PM (#12689480)
That allows attacks comes from another compromised device or TCP SYN packet that uses unusual routing. We've already seen Javascript based attacks that use the browser as a gateway to the LAN.

You need strong authentication and secure (proven input recognizer[1]) code in anything that connects to any network, even a guaranteed LAN. Border security is only one layer of protection, and LANs are rarely an isolated network.

[1] https://media.ccc.de/v/28c3-4763-en-the_science_of_insecurit...

[ Parent | on HN ]
Re:Say Cheese: a snapshot of the massive DDoS attacks coming... by codedokode on Wednesday October 12, 2016 @10:02AM (#12692875)
That doesn't work universally, for example when your device is at home and your smartphone is in another country. Using VPN allows to build a secure network over public infrastructure.
[ Parent | on HN ]