Re:Say Cheese: a snapshot of the massive DDoS attacks coming...
by flukus on Wednesday October 12, 2016 @12:14AM
(#12690388)
This doesn't solve the security issue though, it just moves it to the self update mechanism.
[ Parent
| on HN ]
Re:Say Cheese: a snapshot of the massive DDoS attacks coming...
by riskable on Wednesday October 12, 2016 @09:50AM
(#12692768)
Lack of updates create a security issue. In fact, I'd argue that update mechanisms are the most critical security issue of our time!
By neglecting to update devices you increase risk by ensuring vulnerabilities won't get fixed. You also might not get notified in the event of product recalls (if you never registered your purchase).
I understand your argument though: By solving one security issue we're creating another: Trusting the vendor. To that I have this to say...
If you don't trust the vendor why did you buy their product in the first place!?
Re:Say Cheese: a snapshot of the massive DDoS attacks coming...
by codedokode on Wednesday October 12, 2016 @06:28PM
(#12696903)
Updates cannot help against zero day vulnerability. A better solution would be not to allow anyone to connect to a device.